diff --git a/python38.changes b/python38.changes
index 887aeef..a1f4de0 100644
--- a/python38.changes
+++ b/python38.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Sep 25 06:58:03 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Buildrequire timezone only for general flavor. It's used in this
+  flavor for the test suite.
+
 -------------------------------------------------------------------
 Tue Sep  1 10:16:34 UTC 2020 - Matej Cepl <mcepl@suse.com>
 
@@ -24,6 +30,7 @@ Mon Jul 20 17:46:54 UTC 2020 - Callum Farmer <callumjfarmer13@gmail.com>
     ease maintenance for Linux distributions. Patch by Felix Yan.
   - bpo-41300: Save files with non-ascii chars. Fix regression
     released in 3.9.0b4 and 3.8.4.
+- This release also fixes CVE-2020-26116 (bsc#1177211).
 
 -------------------------------------------------------------------
 Fri Jul 17 06:39:45 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
diff --git a/python38.spec b/python38.spec
index 787fbdc..6381655 100644
--- a/python38.spec
+++ b/python38.spec
@@ -159,7 +159,6 @@ BuildRequires:  lzma-devel
 BuildRequires:  netcfg
 BuildRequires:  openssl-devel
 BuildRequires:  pkgconfig
-BuildRequires:  timezone
 BuildRequires:  xz
 BuildRequires:  pkgconfig(bzip2)
 BuildRequires:  pkgconfig(expat)
@@ -186,6 +185,7 @@ BuildRequires:  gdbm-devel
 BuildRequires:  gettext
 BuildRequires:  readline-devel
 BuildRequires:  sqlite-devel
+BuildRequires:  timezone
 BuildRequires:  update-desktop-files
 BuildRequires:  pkgconfig(ncurses)
 BuildRequires:  pkgconfig(tk)