diff --git a/python-pysaml2.changes b/python-pysaml2.changes
index 8d3ed4f..bfa71ec 100644
--- a/python-pysaml2.changes
+++ b/python-pysaml2.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Nov 29 08:25:34 UTC 2017 - okurz@suse.com
+
+- Add missing runtime dependency on 'defusedxml'
+- Add obsolete suse_version special handling
+
 -------------------------------------------------------------------
 Mon Oct 30 22:27:36 UTC 2017 - michael@stroeder.com
 
diff --git a/python-pysaml2.spec b/python-pysaml2.spec
index d3d1608..77dedae 100644
--- a/python-pysaml2.spec
+++ b/python-pysaml2.spec
@@ -51,12 +51,9 @@ BuildRequires:  %{python_module pytz}
 BuildRequires:  %{python_module repoze.who}
 BuildRequires:  %{python_module requests >= 1.0.0}
 %endif
-%if 0%{?suse_release}
-# NOTE(saschpe): xmlsec has a lot of deps and some issues, thus not require it:
-Recommends:     python-xmlsec
-%endif
 Requires:       python-Paste
 Requires:       python-decorator
+Requires:       python-defusedxml
 Requires:       python-future
 Requires:       python-pyOpenSSL
 Requires:       python-pycryptodomex
@@ -67,11 +64,7 @@ Requires:       python-requests >= 1.0.0
 Requires:       python-six
 Requires:       python-zope.interface
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-%if 0%{?suse_version} && 0%{?suse_version} <= 1110
-%{!?python_sitelib: %global python_sitelib %(python -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
-%else
 BuildArch:      noarch
-%endif
 
 %python_subpackages