From e15b1328af6f4235b9939b336ea0a4e2bd36e273 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pawe=C5=82=20Gronowski?= Date: Tue, 20 Oct 2026 20:44:51 +0200 Subject: [PATCH] engine: 29.9.2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Paweł Gronowski --- content/manuals/engine/release-notes/29.md | 29 ++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/content/manuals/engine/release-notes/29.md b/content/manuals/engine/release-notes/29.md index 9d7c369f4a..671144b9f9 100644 --- a/content/manuals/engine/release-notes/29.md +++ b/content/manuals/engine/release-notes/29.md @@ -22,6 +22,35 @@ For more information about: - Deprecated and removed features, see [Deprecated Engine Features](../deprecated.md). - Changes to the Engine API, see [Engine API version history](/reference/api/engine/version-history/). +## 29.9.2 + +{{< release-date date="2026-10-20" >}} + +For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: + +- [docker/cli, 29.9.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A29.9.2) +- [moby/moby, 29.9.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A29.9.2) + +### Security + +The Go runtime update addresses [CVE-2026-111943](https://go.dev/issue/82345) by rejecting certificate chains that include eight revoked eMudhra intermediate certificates. +Image pulls and pushes fail TLS certificate verification if a registry's certificate chain relies on one of the affected TLS intermediates. +Affected registries need a replacement certificate chain that does not use these intermediates. + +The blocked intermediates are: + +- Domain-validated TLS: `EM DV TLS CA - G3B` and `EM DV TLS CA - G3C` +- Organization-validated TLS: `EM OV TLS CA - G3B` and `EM OV TLS CA - G3C` +- Extended-validation TLS: `EM EV TLS CA - G3B` and `EM EV TLS CA - G3C` +- Code signing: `EM OV CS CA - G3B` and `EM OV CS CA - G3C` + +The G3B intermediates belong to eMudhra BV, and the G3C intermediates belong to eMudhra Inc. +The keys for these intermediates were compromised. + +### Packaging updates + +- Update Go runtime to [1.26.10](https://go.dev/doc/devel/release#go1.26.10). [moby/moby#53989](https://github.com/moby/moby/pull/53989), [docker/cli#7418](https://github.com/docker/cli/pull/7418) + ## 29.9.1 {{< release-date date="2026-10-14" >}}