engine: 29.9.2

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

content/manuals/engine/release-notes/29.md

@@ -22,6 +22,35 @@ For more information about:
 - Deprecated and removed features, see [Deprecated Engine Features](../deprecated.md).
 - Changes to the Engine API, see [Engine API version history](/reference/api/engine/version-history/).
 
+## 29.9.2
+
+{{< release-date date="2026-10-20" >}}
+
+For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
+
+- [docker/cli, 29.9.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A29.9.2)
+- [moby/moby, 29.9.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A29.9.2)
+
+### Security
+
+The Go runtime update addresses [CVE-2026-111943](https://go.dev/issue/82345) by rejecting certificate chains that include eight revoked eMudhra intermediate certificates.
+Image pulls and pushes fail TLS certificate verification if a registry's certificate chain relies on one of the affected TLS intermediates.
+Affected registries need a replacement certificate chain that does not use these intermediates.
+
+The blocked intermediates are:
+
+- Domain-validated TLS: `EM DV TLS CA - G3B` and `EM DV TLS CA - G3C`
+- Organization-validated TLS: `EM OV TLS CA - G3B` and `EM OV TLS CA - G3C`
+- Extended-validation TLS: `EM EV TLS CA - G3B` and `EM EV TLS CA - G3C`
+- Code signing: `EM OV CS CA - G3B` and `EM OV CS CA - G3C`
+
+The G3B intermediates belong to eMudhra BV, and the G3C intermediates belong to eMudhra Inc.
+The keys for these intermediates were compromised.
+
+### Packaging updates
+
+- Update Go runtime to [1.26.10](https://go.dev/doc/devel/release#go1.26.10). [moby/moby#53989](https://github.com/moby/moby/pull/53989), [docker/cli#7418](https://github.com/docker/cli/pull/7418)
+
 ## 29.9.1
 
 {{< release-date date="2026-10-14" >}}