diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index a78bdc17..fba766f7 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -1,6 +1,11 @@
 Changelog
 =========
 
+1.6.2 (2026-01-01)
+------------------
+* Updated ``libsodium`` to 1.0.20-stable (2025-12-31 build) to resolve
+  ``CVE-2025-69277``.
+
 1.6.1 (2025-11-10)
 ------------------
 * The ``MAKE`` environment variable can now be used to specify the ``make``
diff --git a/pyproject.toml b/pyproject.toml
index 34f8afaf..97aae1be 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -13,7 +13,7 @@ dynamic = ["readme"]
 
 name = "PyNaCl"
 # Must be kept in sync with `src/nacl/__init__.py`
-version = "1.6.1"
+version = "1.6.2"
 authors = [
     {name = "The PyNaCl developers", email = "cryptography-dev@python.org"}
 ]
diff --git a/src/nacl/__init__.py b/src/nacl/__init__.py
index 6ab2708e..83aaacf5 100644
--- a/src/nacl/__init__.py
+++ b/src/nacl/__init__.py
@@ -22,4 +22,4 @@
 __uri__ = "https://github.com/pyca/pynacl/"
 
 # Must be kept in sync with `pyproject.toml`
-__version__ = "1.6.1"
+__version__ = "1.6.2"