diff --git a/content/manuals/engine/release-notes/29.md b/content/manuals/engine/release-notes/29.md
index 749b16d77c..0d7f28ee39 100644
--- a/content/manuals/engine/release-notes/29.md
+++ b/content/manuals/engine/release-notes/29.md
@@ -22,6 +22,23 @@ For more information about:
 - Deprecated and removed features, see [Deprecated Engine Features](../deprecated.md).
 - Changes to the Engine API, see [Engine API version history](/reference/api/engine/version-history/).
 
+## 29.4.3
+
+{{< release-date date="2026-05-06" >}}
+
+For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
+
+- [docker/cli, 29.4.3 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A29.4.3)
+- [moby/moby, 29.4.3 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A29.4.3)
+
+### Security
+
+- **CVE-2026-31431**: Replace the socketcall(2) seccomp deny that broke 32-bit programs with targeted AppArmor (deny network alg) and SELinux (alg_socket) rules that block AF_ALG at the LSM layer, covering both socket(2) and socketcall(2) paths without disrupting legitimate 32-bit workloads. [moby/moby#52537](https://github.com/moby/moby/pull/52537)
+
+  On SELinux-based systems, the SELinux mitigation requires the daemon to be configured with `selinux-enabled: true` (via `daemon.json` or the `--selinux-enabled` CLI flag). This option is not enabled by default.
+
+- Fix the default AppArmor profile not being updated on daemon restart, requiring a system reboot to pick up profile changes from daemon upgrades. [moby/moby#52537](https://github.com/moby/moby/pull/52537)
+
 ## 29.4.2
 
 {{< release-date date="2026-05-01" >}}
diff --git a/hugo.yaml b/hugo.yaml
index a1d433fc63..c6370ed260 100644
--- a/hugo.yaml
+++ b/hugo.yaml
@@ -156,10 +156,10 @@ params:
   # Latest version of the Docker Engine API
   latest_engine_api_version: "1.54"
   # Latest version of Docker Engine
-  docker_ce_version: "29.4.2"
+  docker_ce_version: "29.4.3"
   # Previous version of the Docker Engine
   # (Used to show e.g., "latest" and "latest"-1 in engine install examples
-  docker_ce_version_prev: "29.4.1"
+  docker_ce_version_prev: "29.4.2"
   # Latest Docker Compose version
   compose_version: "v5.1.2"
   # Latest BuildKit version