diff --git a/needrestart.spec b/needrestart.spec
index 4f7657c..bb79ac4 100644
--- a/needrestart.spec
+++ b/needrestart.spec
@@ -1,9 +1,9 @@
 Name:           needrestart
-Version:        3.6
-Release:        7%{?dist}
+Version:        3.8
+Release:        10%{?dist}
 Summary:        Restart daemons after library updates
 
-License:        GPLv2+
+License:        GPL-2.0-or-later
 URL:            https://github.com/liske/%{name}
 Source0:        https://github.com/liske/%{name}/archive/v%{version}/%{name}-%{version}.tar.gz
 Source1:        debconf__needrestart.templates
@@ -62,6 +62,10 @@ cp man/needrestart.1 %{buildroot}/%{_mandir}/man1/
 %find_lang needrestart-notify
 # useless files
 rm -rf %{buildroot}/%{perl_archlib}
+# binary install path is hardcoded in the Makefile
+# (see https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin)
+mkdir -p %{buildroot}/usr/bin
+mv %{buildroot}/usr/sbin/%{name} %{buildroot}/usr/bin/%{name}
 # workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1489569
 cp %{SOURCE1} %{buildroot}/%{_datadir}/%{name}/needrestart.templates
 # workaround for https://github.com/liske/needrestart/issues/75
@@ -95,7 +99,7 @@ echo "IUCODE_TOOL_EXTRA_OPTIONS=--ignore-broken" >%{buildroot}/%{_sysconfdir}/de
 %doc README.md README.batch.md README.Cont.md README.Interp.md README.nagios.md README.uCode.md NEWS ChangeLog
 %config(noreplace) %{_sysconfdir}/%{name}
 %config(noreplace) %{_sysconfdir}/default/intel-microcode
-%{_sbindir}/%{name}
+%{_bindir}/%{name}
 %{perl_vendorlib}/*
 # %%{_libdir} resolves to /usr/lib64 on 64-bits systems, but the software does not handle this
 /usr/lib/%{name}
@@ -112,6 +116,60 @@ echo "IUCODE_TOOL_EXTRA_OPTIONS=--ignore-broken" >%{buildroot}/%{_sysconfdir}/de
 
 
 %changelog
+* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 3.8-10
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
+
+* Wed Jun 03 2026 Python Maint <python-maint@redhat.com> - 3.8-9
+- Rebuilt for Python 3.15
+
+* Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 3.8-8
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
+
+* Fri Sep 19 2025 Python Maint <python-maint@redhat.com> - 3.8-7
+- Rebuilt for Python 3.14.0rc3 bytecode
+
+* Fri Aug 15 2025 Python Maint <python-maint@redhat.com> - 3.8-6
+- Rebuilt for Python 3.14.0rc2 bytecode
+
+* Thu Jul 24 2025 Fedora Release Engineering <releng@fedoraproject.org> - 3.8-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
+
+* Mon Jun 02 2025 Python Maint <python-maint@redhat.com> - 3.8-4
+- Rebuilt for Python 3.14
+
+* Wed Mar 26 2025 Marc Dequènes (Duck) <duck@redhat.com> - 3.8-3
+- Work around hardcoded binary install path for bin+sbin merge.
+* Fri Jan 17 2025 Fedora Release Engineering <releng@fedoraproject.org> - 3.8-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
+
+* Sun Nov 24 2024 Steve Cossette <farchord@gmail.com> - 3.8-1
+- Update to 3.8 to fix several CVEs:
+- CVE-2024-48991: Prevent race condition on /proc/$PID/exec evaluation
+- CVE-2024-11003: Drop usage of Module::ScanDeps to prevent LPE.
+- CVE-2024-48990: Do not set PYTHONPATH environment variable to prevent a LPE.
+- CVE-2024-48992: Do not set RUBYLIB environment variable to prevent a LPE.
+
+* Fri Jul 26 2024 Miroslav Suchý <msuchy@redhat.com> - 3.6-14
+- convert license to SPDX
+
+* Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-13
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
+
+* Fri Jun 07 2024 Python Maint <python-maint@redhat.com> - 3.6-12
+- Rebuilt for Python 3.13
+
+* Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-11
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-10
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-9
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
+
+* Tue Jun 13 2023 Python Maint <python-maint@redhat.com> - 3.6-8
+- Rebuilt for Python 3.12
+
 * Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.6-7
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
 
diff --git a/sources b/sources
index 25e4b2b..c90cce9 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (needrestart-3.6.tar.gz) = 5c0f2f427c93e6f621fc1727f6abf42651e184e168b3f720708ac73b425bc7dfb94622c6cc2afad1161e3ffbfd36500eb99c375f2f5a525c9cd10d7142f1e365
+SHA512 (needrestart-3.8.tar.gz) = 5c6f109d137658c8097cf109f8d6e67fb7dad15d47c3c892ae1504fea0b6cdb1e05bf1fa2f861296501729698c924e8343fc1e57cac960d90798138fcdebed31