diff --git a/Dockerfile b/Dockerfile
index f5f171ec7b944cb9af2752afaa0a2398e0c4d8e4..40a8f20a8b6064369617cea20e873d3b0d2627bb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 FROM ubuntu:bionic
 MAINTAINER patrick@oberdorf.net
 
-ENV VERSION 1.15.0
+ENV VERSION 1.17.0
 
 WORKDIR /usr/local/src/
 ADD assets/sha256checksum sha256checksum
diff --git a/README.md b/README.md
index 28c453a3af705edd8eceb5f01b446515af515011..504ae334f69517af8a2d12dcbda14f257b1310b0 100644
--- a/README.md
+++ b/README.md
@@ -5,12 +5,12 @@ Unbound (with DNSSEC validation)
 
 Just use this command to start the container. Unbound will listen on port 53/udp.
 
-```docker run --name unbound -d -p 53:53/udp -p 53:53 mobilistics/unbound:1.15.0```
+```docker run --name unbound -d -p 53:53/udp -p 53:53 mobilistics/unbound:1.17.0```
 
 (optional)
 If you want to override the nameserver in the unbound container, you can use:
 
-```docker run --name unbound -d -p 53:53/udp -p 53:53 --dns="127.0.0.1" mobilistics/unbound:1.15.0```
+```docker run --name unbound -d -p 53:53/udp -p 53:53 --dns="127.0.0.1" mobilistics/unbound:1.17.0```
 
 # Configuration
 These options can be set via the environment variable -e flag:
diff --git a/assets/sha256checksum b/assets/sha256checksum
index 178a404bfd519c88547267ec21213043beb5e5e6..432f4ea28cad5ddfc364aa20f8d7d55181b69021 100644
--- a/assets/sha256checksum
+++ b/assets/sha256checksum
@@ -1 +1 @@
-a480dc6c8937447b98d161fe911ffc76cfaffa2da18788781314e81339f1126f unbound-1.15.0.tar.gz
+dcbc95d7891d9f910c66e4edc9f1f2fde4dea2eec18e3af9f75aed44a02f1341 unbound-1.17.0.tar.gz
diff --git a/docker-compose.yml b/docker-compose.yml
index 5904cf5882d1578d32ab587d0c24dd580cc4022b..27d4ca867babf52d0a07ccf0d89c942799527c5e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,5 +1,5 @@
 unbound:
-  image: mobilistics/unbound:1.15.0
+  image: mobilistics/unbound:1.17.0
   ports:
   - "53:53/udp"
   - "53:53"