diff --git a/.gitignore b/.gitignore
index 57717ac..ab3d964 100644
--- a/.gitignore
+++ b/.gitignore
@@ -77,3 +77,4 @@
 /openjdk-17.0.15+6.tar.xz
 /openjdk-17.0.16+8.tar.xz
 /openjdk-17.0.17+7-ea.tar.xz
+/openjdk-17.0.17+10.tar.xz
\ No newline at end of file
diff --git a/java-17-openjdk-portable.specfile b/java-17-openjdk-portable.specfile
index 45cab22..ecdfb7c 100644
--- a/java-17-openjdk-portable.specfile
+++ b/java-17-openjdk-portable.specfile
@@ -379,7 +379,7 @@
 %global origin_nice     OpenJDK
 %global top_level_dir_name   %{vcstag}
 %global top_level_dir_name_backup %{top_level_dir_name}-backup
-%global buildver 7
+%global buildver 10
 %global rpmrelease 1
 #%%global tagsuffix     %%{nil}
 # Priority must be 8 digits in total; up to openjdk 1.8, we were using 18..... so when we moved to 11, we had to add another digit
@@ -399,7 +399,7 @@
 # Release will be (where N is usually a number starting at 1):
 # - 0.N%%{?extraver}%%{?dist} for EA releases,
 # - N%%{?extraver}{?dist} for GA releases
-%global is_ga 0
+%global is_ga 1
 %if %{is_ga}
 %global build_type GA
 %global ea_designator ""
@@ -1832,6 +1832,18 @@ done
 %endif
 
 %changelog
+* Thu Oct 16 2025 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.17.0.10-1
+- Update NEWS for jdk-17.0.17+10 (GA)
+- Move prior JDK-8309841 release note to appropriate section
+
+* Tue Oct 14 2025 Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
+- Update to jdk-17.0.17+10 (GA)
+- Add to .gitignore openjdk-17.0.17+10.tar.xz
+- Set buildver to 10
+- Set is_ga to 1
+- Update sources to openjdk-17.0.17+10.tar.xz
+- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
+
 * Thu Sep 18 2025 Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.7-0.1.ea
 - Update to jdk-17.0.17+7 (EA)
 - Add to .gitignore openjdk-17.0.17+7-ea.tar.xz
diff --git a/java-17-openjdk.spec b/java-17-openjdk.spec
index d74c157..368b1fe 100644
--- a/java-17-openjdk.spec
+++ b/java-17-openjdk.spec
@@ -379,9 +379,8 @@
 %global origin_nice     OpenJDK
 %global top_level_dir_name   %{vcstag}
 %global top_level_dir_name_backup %{top_level_dir_name}-backup
-%global buildver 7
-# rpmrelease numbering must start at 2 to be later than the 8.6 RPM
-%global rpmrelease 2
+%global buildver 10
+%global rpmrelease 1
 # Settings used by the portable build
 %global portablerelease 1
 %global portablesuffix el8
@@ -404,7 +403,7 @@
 # Release will be (where N is usually a number starting at 1):
 # - 0.N%%{?extraver}%%{?dist} for EA releases,
 # - N%%{?extraver}{?dist} for GA releases
-%global is_ga 0
+%global is_ga 1
 %if %{is_ga}
 %global build_type GA
 %global ea_designator ""
@@ -2499,6 +2498,17 @@ cjc.mainProgram(args)
 %endif
 
 %changelog
+* Thu Oct 16 2025 Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
+- Update to jdk-17.0.17+10 (GA)
+- Add to .gitignore openjdk-17.0.17+10.tar.xz
+- Set buildver to 10
+- Set rpmrelease to 1, remove 'must start at 2' comment
+- Set is_ga to 1
+- Update sources to openjdk-17.0.17+10.tar.xz
+- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
+- Resolves: RHEL-119449
+- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
+
 * Fri Sep 26 2025 Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.7-0.2.ea
 - Update to jdk-17.0.17+7 (EA)
 - Add to .gitignore openjdk-17.0.17+7-ea.tar.xz
diff --git a/sources b/sources
index 892fc07..a54c227 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (tapsets-icedtea-6.0.0pre00-c848b93a8598.tar.xz) = 97d026212363b3c83f6a04100ad7f6fdde833d16579717f8756e2b8c2eb70e144a41a330cb9ccde9c3badd37a2d54fdf4650a950ec21d8b686d545ecb2a64d30
-SHA512 (openjdk-17.0.17+7-ea.tar.xz) = ede4d3a9c262fb53db157b253c8fc2480a65e0766b1c82d663752931435ac537590dad47a77bfaba5bad1dd36d35d5d7b2e480ed9a11971e875b5d88bdbd8686
+SHA512 (openjdk-17.0.17+10.tar.xz) = d8f3323b9f9158a5b93c28597f30ed6240764196a385e927326818af94e4e1280ccad21784af39876bb539a8f3882c6a684c848f8047badc622c36afc3d2105d