diff --git a/content/manuals/engine/release-notes/29.md b/content/manuals/engine/release-notes/29.md
index 24d81f44d2..6499a9acc6 100644
--- a/content/manuals/engine/release-notes/29.md
+++ b/content/manuals/engine/release-notes/29.md
@@ -22,6 +22,21 @@ For more information about:
 - Deprecated and removed features, see [Deprecated Engine Features](../deprecated.md).
 - Changes to the Engine API, see [Engine API version history](/reference/api/engine/version-history/).
 
+## 29.4.2
+
+{{< release-date date="2026-05-01" >}}
+
+For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
+
+- [docker/cli, 29.4.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A29.4.2)
+- [moby/moby, 29.4.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A29.4.2)
+
+### Security
+
+This release includes hardening for **CVE-2026-31431**.
+
+- Block `AF_ALG` sockets and the `socketcall(2)` multiplexer in the default seccomp profile to prevent in-container privilege escalation via the kernel crypto API ("Copy Fail"). [moby/moby#52501](https://github.com/moby/moby/pull/52501)
+
 ## 29.4.1
 
 {{< release-date date="2026-04-20" >}}
diff --git a/hugo.yaml b/hugo.yaml
index 72c1b5e2a8..fb842c2603 100644
--- a/hugo.yaml
+++ b/hugo.yaml
@@ -156,10 +156,10 @@ params:
   # Latest version of the Docker Engine API
   latest_engine_api_version: "1.54"
   # Latest version of Docker Engine
-  docker_ce_version: "29.4.1"
+  docker_ce_version: "29.4.2"
   # Previous version of the Docker Engine
   # (Used to show e.g., "latest" and "latest"-1 in engine install examples
-  docker_ce_version_prev: "29.4.0"
+  docker_ce_version_prev: "29.4.1"
   # Latest Docker Compose version
   compose_version: "v5.1.2"
   # Latest BuildKit version