diff --git a/.gitignore b/.gitignore
index 8bb1363..f8be2c0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -58,3 +58,4 @@
 /shenandoah-jdk11-shenandoah-jdk-11.0.8+7-4curve.tar.xz
 /shenandoah-jdk11-shenandoah-jdk-11.0.8+8-4curve.tar.xz
 /shenandoah-jdk11-shenandoah-jdk-11.0.8+9-4curve.tar.xz
+/shenandoah-jdk11-shenandoah-jdk-11.0.8+10-4curve.tar.xz
diff --git a/NEWS b/NEWS
index cc8eacf..426a78c 100644
--- a/NEWS
+++ b/NEWS
@@ -318,6 +318,7 @@ Live versions of these release notes can be found at:
   - JDK-8245649: Revert 8245397 backport of 8230591
   - JDK-8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts
   - JDK-8246613: Choose the default SecureRandom algo based on registration ordering
+  - JDK-8248505: Unexpected NoSuchAlgorithmException when using secure random impl from BCFIPS provider
 
 Notes on individual issues:
 ===========================
diff --git a/java-11-openjdk.spec b/java-11-openjdk.spec
index 15b6aad..ef5db5c 100644
--- a/java-11-openjdk.spec
+++ b/java-11-openjdk.spec
@@ -229,7 +229,7 @@
 %global origin_nice     OpenJDK
 %global top_level_dir_name   %{origin}
 %global minorver        0
-%global buildver        9
+%global buildver        10
 %global rpmrelease      0
 #%%global tagsuffix      ""
 # priority must be 8 digits in total; untill openjdk 1.8 we were using 18..... so when moving to 11 we had to add another digit
@@ -247,7 +247,7 @@
 # Release will be (where N is usually a number starting at 1):
 # - 0.N%%{?extraver}%%{?dist} for EA releases,
 # - N%%{?extraver}{?dist} for GA releases
-%global is_ga           0
+%global is_ga           1
 %if %{is_ga}
 %global ea_designator ""
 %global ea_designator_zip ""
@@ -1965,6 +1965,11 @@ require "copy_jdk_configs.lua"
 
 
 %changelog
+* Sat Jul 11 2020 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-0
+- Update to shenandoah-jdk-11.0.8+10 (GA)
+- Switch to GA mode for final release.
+- Update release notes with last minute fix (JDK-8248505).
+
 * Fri Jul 10 2020 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.0.ea
 - Update to shenandoah-jdk-11.0.8+9 (EA)
 - Update release notes for 11.0.8 release.
diff --git a/sources b/sources
index 2b0bd9e..8453ed9 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (tapsets-icedtea-3.15.0.tar.xz) = c752a197cb3d812d50c35e11e4722772be40096c81d2a57933e0d9b8a3c708b9c157b8108a4e33a06ca7bb81648170994408c75d6f69d5ff12785d0c31009671
-SHA512 (shenandoah-jdk11-shenandoah-jdk-11.0.8+9-4curve.tar.xz) = 31e9b558dc30dabe6050ebbfe4d58029d569ab7a2c5b3b9b73f19674980ecd5dfa539d5c75fdb6daf8f7f69a816d33cc81e88423c6044e15a48e9f2bc81eb826
+SHA512 (shenandoah-jdk11-shenandoah-jdk-11.0.8+10-4curve.tar.xz) = a78914b08fd4b935665a808bd383afa8ee8517454779df0aa1f2d83984cb230b5edff2d7826daaadc0891d3463e49911d90614523d6a42ad430b367a2e33093f