diff --git a/unbound-1.7.0-prefetch.patch b/unbound-1.7.0-prefetch.patch
new file mode 100644
index 0000000..d877b7b
--- /dev/null
+++ b/unbound-1.7.0-prefetch.patch
@@ -0,0 +1,10 @@
+--- a/daemon/remote.c	2017-09-18 10:55:08.000000000 +0200
++++ b/daemon/remote.c	2018-04-09 10:55:46.719032250 +0200
+@@ -1644,6 +1644,7 @@
+ 		struct reply_info* d = (struct reply_info*)e->data;
+ 		if(d->ttl > inf->expired) {
+ 			d->ttl = inf->expired;
++			d->prefetch_ttl = inf->expired;
+ 			inf->num_msgs++;
+ 		}
+ 	}
diff --git a/unbound.spec b/unbound.spec
index 0f510d4..4283412 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -21,7 +21,7 @@
 Summary: Validating, recursive, and caching DNS(SEC) resolver
 Name: unbound
 Version: 1.7.0
-Release: 3%{?extra_version:.%{extra_version}}%{?dist}
+Release: 4%{?extra_version:.%{extra_version}}%{?dist}
 License: BSD
 Url: https://www.unbound.net/
 Source: https://www.unbound.net/downloads/%{name}-%{version}%{?extra_version}.tar.gz
@@ -44,6 +44,7 @@ Source17: unbound-anchor.service
 
 Patch1: unbound-1.7.0-aggrnsec.patch
 Patch2: unbound-1.7.0-ref.patch
+Patch3: unbound-1.7.0-prefetch.patch
 
 Group: System Environment/Daemons
 BuildRequires: flex, openssl-devel
@@ -144,10 +145,12 @@ mv %{pkgname} %{pkgname}_python2
 pushd %{pkgname}_python2
 %patch1 -p1
 %patch2 -p1
+%patch3 -p1
 %else
 pushd %{pkgname}
 %patch1 -p1
 %patch2 -p1
+%patch3 -p0
 %endif # with_python
 
 # only for snapshots
@@ -442,6 +445,9 @@ popd
 %attr(0644,root,root) %config %{_sysconfdir}/%{name}/root.key
 
 %changelog
+* Mon Apr 09 2018 Paul Wouters <pwouters@redhat.com> - 1.7.0-4
+- Patch for prefetching after flushing cache
+
 * Fri Apr 06 2018 Paul Wouters <pwouters@redhat.com> - 1.7.0-3
 - Patch for referral with auth-zone: response