diff --git a/python-pycurl.changes b/python-pycurl.changes
index d79821f..5012296 100644
--- a/python-pycurl.changes
+++ b/python-pycurl.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Nov  6 16:51:52 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- fix build with libcurl >= 8.17.0 boo#1253116
+  skip_kerberos_tests_on_libcurl_8_17_0.patch
+
 -------------------------------------------------------------------
 Fri Sep 12 06:19:06 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
 
diff --git a/python-pycurl.spec b/python-pycurl.spec
index a38ac76..1a50a69 100644
--- a/python-pycurl.spec
+++ b/python-pycurl.spec
@@ -45,6 +45,8 @@ Patch2:         disable_randomly_failing_tests.patch
 Patch3:         make-leap15-compat.patch
 # PATCH-FIX-UPSTREAM handle-change-debug-curl-8.16.0.patch gh#pycurl/pycurl@eb7f52eeef85
 Patch4:         handle-change-debug-curl-8.16.0.patch
+# PATCH-FIX-UPSTREAM skip_kerberos_tests_on_libcurl_8_17_0.patch gh#pycurl/pycurl@33bf92f
+Patch5:         skip_kerberos_tests_on_libcurl_8_17_0.patch
 BuildRequires:  %{python_module devel}
 BuildRequires:  %{python_module pip}
 BuildRequires:  %{python_module setuptools}
diff --git a/skip_kerberos_tests_on_libcurl_8_17_0.patch b/skip_kerberos_tests_on_libcurl_8_17_0.patch
new file mode 100644
index 0000000..92a883b
--- /dev/null
+++ b/skip_kerberos_tests_on_libcurl_8_17_0.patch
@@ -0,0 +1,30 @@
+From ea92e3ca230a3ff3d464cb6816102fa157177aca Mon Sep 17 00:00:00 2001
+From: Jacek Migacz <jmigacz@redhat.com>
+Date: Fri, 17 Oct 2025 13:55:48 +0200
+Subject: [PATCH] Skip Kerberos tests on libcurl >= 8.17.0
+
+CURLOPT_KRBLEVEL and CURLOPT_KRB4LEVEL were removed in libcurl
+8.17.0 and now return CURLE_NOT_BUILT_IN.
+---
+ tests/option_constants_test.py | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/tests/option_constants_test.py b/tests/option_constants_test.py
+index 1dd862c39..de1b08012 100644
+--- a/tests/option_constants_test.py
++++ b/tests/option_constants_test.py
+@@ -502,12 +502,14 @@ def test_ssl_sessionid_cache(self):
+         curl.setopt(curl.SSL_SESSIONID_CACHE, True)
+         curl.close()
+ 
++    @util.removed_in_libcurl(8, 17, 0)
+     @util.only_gssapi
+     def test_krblevel(self):
+         curl = pycurl.Curl()
+         curl.setopt(curl.KRBLEVEL, 'clear')
+         curl.close()
+ 
++    @util.removed_in_libcurl(8, 17, 0)
+     @util.only_gssapi
+     def test_krb4level(self):
+         curl = pycurl.Curl()