diff --git a/php-net-snmp.patch b/php-net-snmp.patch
new file mode 100644
index 0000000..e26f5e8
--- /dev/null
+++ b/php-net-snmp.patch
@@ -0,0 +1,47 @@
+From eb8fb56b9b91996912bf9f5765963bf1efea025a Mon Sep 17 00:00:00 2001
+From: Remi Collet <remi@remirepo.net>
+Date: Thu, 27 May 2021 14:20:07 +0200
+Subject: [PATCH] Fix snmp build without DES
+
+---
+ ext/snmp/snmp.c | 16 ++++++++++++++--
+ 1 file changed, 14 insertions(+), 2 deletions(-)
+
+diff --git a/ext/snmp/snmp.c b/ext/snmp/snmp.c
+index 35d19c8738828..d31995827880d 100644
+--- a/ext/snmp/snmp.c
++++ b/ext/snmp/snmp.c
+@@ -955,19 +955,31 @@ static int netsnmp_session_set_auth_protocol(struct snmp_session *s, char *prot)
+    Set the security protocol in the snmpv3 session */
+ static int netsnmp_session_set_sec_protocol(struct snmp_session *s, char *prot)
+ {
++#ifndef NETSNMP_DISABLE_DES
+ 	if (!strcasecmp(prot, "DES")) {
+ 		s->securityPrivProto = usmDESPrivProtocol;
+ 		s->securityPrivProtoLen = USM_PRIV_PROTO_DES_LEN;
++	} else
++#endif
+ #ifdef HAVE_AES
+-	} else if (!strcasecmp(prot, "AES128") || !strcasecmp(prot, "AES")) {
++	if (!strcasecmp(prot, "AES128") || !strcasecmp(prot, "AES")) {
+ 		s->securityPrivProto = usmAESPrivProtocol;
+ 		s->securityPrivProtoLen = USM_PRIV_PROTO_AES_LEN;
++	} else
+ #endif
+-	} else {
++	{
+ #ifdef HAVE_AES
++#ifndef NETSNMP_DISABLE_DES
+ 		zend_value_error("Security protocol must be one of \"DES\", \"AES128\", or \"AES\"");
+ #else
++		zend_value_error("Security protocol must be one of \"AES128\", or \"AES\"");
++#endif
++#else
++#ifndef NETSNMP_DISABLE_DES
+ 		zend_value_error("Security protocol must be \"DES\"");
++#else
++		zend_value_error("No security protocol supported");
++#endif
+ #endif
+ 		return (-1);
+ 	}
diff --git a/php.spec b/php.spec
index 82983d9..c5397f1 100644
--- a/php.spec
+++ b/php.spec
@@ -62,7 +62,7 @@
 Summary: PHP scripting language for creating dynamic web sites
 Name: php
 Version: %{upver}%{?rcver:~%{rcver}}
-Release: 1%{?dist}
+Release: 2%{?dist}
 # All files licensed under PHP version 3.01, except
 # Zend is licensed under Zend
 # TSRM is licensed under BSD
@@ -114,6 +114,7 @@ Patch45: php-7.4.0-ldap_r.patch
 Patch47: php-8.0.0-phpinfo.patch
 
 # Upstream fixes (100+)
+Patch100: php-net-snmp.patch
 
 # Security fixes (200+)
 
@@ -710,6 +711,7 @@ in pure PHP.
 %patch47 -p1 -b .phpinfo
 
 # upstream patches
+%patch100 -p1 -b .nodes
 
 # security patches
 
@@ -1521,6 +1523,9 @@ systemctl try-restart php-fpm.service >/dev/null 2>&1 || :
 
 
 %changelog
+* Thu May 27 2021 Remi Collet <remi@remirepo.net> - 8.0.7~RC1-2
+- fix snmp extension for net-snmp without DES
+
 * Thu May 20 2021 Remi Collet <remi@remirepo.net> - 8.0.7~RC1-1
 - update to 8.0.7RC1