diff --git a/.gitignore b/.gitignore
index de4601e..3c4c54b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
-SOURCES/aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u292-b09-4curve.tar.xz
+SOURCES/aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u292-b10-4curve.tar.xz
 SOURCES/tapsets-icedtea-3.15.0.tar.xz
diff --git a/.java-1.8.0-openjdk.metadata b/.java-1.8.0-openjdk.metadata
index 1aff2c7..72a0eab 100644
--- a/.java-1.8.0-openjdk.metadata
+++ b/.java-1.8.0-openjdk.metadata
@@ -1,2 +1,2 @@
-3300a797a5c0358c9a20cc02a0639e025dea8af9 SOURCES/aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u292-b09-4curve.tar.xz
+0cb5765ee97938f0999c2fb9054338aba5f55cb7 SOURCES/aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u292-b10-4curve.tar.xz
 7ae2cba67467825b2c2a5fec7aea041865023002 SOURCES/tapsets-icedtea-3.15.0.tar.xz
diff --git a/SOURCES/NEWS b/SOURCES/NEWS
index fa9e29f..e5dea8d 100644
--- a/SOURCES/NEWS
+++ b/SOURCES/NEWS
@@ -9,6 +9,13 @@ Live versions of these release notes can be found at:
   * https://bitly.com/openjdk8u292
   * https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u292.txt
 
+* Security fixes
+  - JDK-8227467: Better class method invocations
+  - JDK-8244473: Contextualize registration for JNDI
+  - JDK-8244543: Enhanced handling of abstract classes
+  - JDK-8249906, CVE-2021-2163: Enhance opening JARs
+  - JDK-8250568, CVE-2021-2161: Less ambiguous processing
+  - JDK-8253799: Make lists of normal filenames
 * Other changes
   - JDK-6345095: regression test EmptyClipRenderingTest fails
   - JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java fails with OOME during System.out.println
@@ -92,6 +99,7 @@ Live versions of these release notes can be found at:
   - JDK-8256682: JDK-8202343 is incomplete
   - JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines
   - JDK-8258241: [8u] Missing doPrivileged() hunks from JDK-8226575
+  - JDK-8258247: Couple of issues in fix for JDK-8249906
   - JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder.rotateDisk()
   - JDK-8258430: 8u backport of JDK-8063107 missing test/javax/swing/JRadioButton/8041561/bug8041561.java changes
   - JDK-8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
@@ -99,10 +107,12 @@ Live versions of these release notes can be found at:
   - JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
   - JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will
   - JDK-8259384: CUP version wrong in THIRD_PARTY_README after JDK-8233548
+  - JDK-8259428: AlgorithmId.getEncodedParams() should return copy
   - JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
   - JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS
   - JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
   - JDK-8260930: AARCH64: Invalid value passed to critical JNI function
+  - JDK-8261183: Follow on to Make lists of normal filenames
   - JDK-8261231: Windows IME was disabled after DnD operation
   - JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to build with VS2017
   - JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer memory
diff --git a/SPECS/java-1.8.0-openjdk.spec b/SPECS/java-1.8.0-openjdk.spec
index d0eed09..3591d1b 100644
--- a/SPECS/java-1.8.0-openjdk.spec
+++ b/SPECS/java-1.8.0-openjdk.spec
@@ -250,7 +250,7 @@
 # note, following three variables are sedded from update_sources if used correctly. Hardcode them rather there.
 %global shenandoah_project	aarch64-port
 %global shenandoah_repo		jdk8u-shenandoah
-%global shenandoah_revision    	aarch64-shenandoah-jdk8u292-b09
+%global shenandoah_revision    	aarch64-shenandoah-jdk8u292-b10
 # Define old aarch64/jdk8u tree variables for compatibility
 %global project         %{shenandoah_project}
 %global repo            %{shenandoah_repo}
@@ -271,7 +271,7 @@
 # Release will be (where N is usually a number starting at 1):
 # - 0.N%%{?extraver}%%{?dist} for EA releases,
 # - N%%{?extraver}{?dist} for GA releases
-%global is_ga           0
+%global is_ga           1
 %if %{is_ga}
 %global milestone          fcs
 %global milestone_version  %{nil}
@@ -2386,6 +2386,12 @@ require "copy_jdk_configs.lua"
 %endif
 
 %changelog
+* Tue Apr 13 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2
+- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
+- Update release notes for 8u292-b10.
+- This tarball is embargoed until 2021-04-20 @ 1pm PT.
+- Resolves: rhbz#1938201
+
 * Tue Apr 13 2021 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.2.ea
 - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
 - Update release notes for 8u292-b09.