diff --git a/pynacl-1.6.1.tar.gz b/pynacl-1.6.1.tar.gz
deleted file mode 100644
index 030e786..0000000
--- a/pynacl-1.6.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8d361dac0309f2b6ad33b349a56cd163c98430d409fa503b10b70b3ad66eaa1d
-size 3506616
diff --git a/pynacl-1.6.2.tar.gz b/pynacl-1.6.2.tar.gz
new file mode 100644
index 0000000..fc2f2bf
--- /dev/null
+++ b/pynacl-1.6.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:018494d6d696ae03c7e656e5e74cdfd8ea1326962cc401bcf018f1ed8436811c
+size 3511692
diff --git a/python-PyNaCl.changes b/python-PyNaCl.changes
index 3c7768f..e7f115c 100644
--- a/python-PyNaCl.changes
+++ b/python-PyNaCl.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Jan 26 07:57:44 UTC 2026 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.6.2 (bsc#1255764, CVE-2025-69277):
+  * Updated libsodium to 1.0.20-stable (2025-12-31 build) to
+    resolve CVE-2025-69277.
+
 -------------------------------------------------------------------
 Mon Nov 17 08:52:12 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
 
@@ -54,7 +61,7 @@ Sun Jan  9 18:54:14 UTC 2022 - Michael Ströder <michael@stroeder.com>
 -------------------------------------------------------------------
 Mon Nov  8 10:39:20 UTC 2021 - Dirk Müller <dmueller@suse.com>
 
-- six is needed by testsuite 
+- six is needed by testsuite
 
 -------------------------------------------------------------------
 Sun Jul  5 14:42:24 UTC 2020 - Michael Ströder <michael@stroeder.com>
@@ -99,12 +106,12 @@ Tue Jan 21 13:46:13 UTC 2020 - pgajdos@suse.com
 -------------------------------------------------------------------
 Wed Sep 25 14:15:57 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
 
-- Add missing runtime dependency on cffi 
+- Add missing runtime dependency on cffi
 
 -------------------------------------------------------------------
 Thu Jul 18 11:12:47 UTC 2019 - Ondřej Súkup <mimi.vx@gmail.com>
 
-- add fix_tests.patch for new pytest 
+- add fix_tests.patch for new pytest
 
 -------------------------------------------------------------------
 Mon Jun  3 14:17:29 UTC 2019 - pgajdos@suse.com
diff --git a/python-PyNaCl.spec b/python-PyNaCl.spec
index e8ec6b1..36e781d 100644
--- a/python-PyNaCl.spec
+++ b/python-PyNaCl.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-PyNaCl
 #
-# Copyright (c) 2025 SUSE LLC and contributors
+# Copyright (c) 2026 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-PyNaCl
-Version:        1.6.1
+Version:        1.6.2
 Release:        0
 Summary:        Python binding to the Networking and Cryptography (NaCl) library
 License:        Apache-2.0
@@ -34,7 +34,7 @@ BuildRequires:  %{python_module wheel}
 BuildRequires:  fdupes
 BuildRequires:  pkgconfig
 BuildRequires:  python-rpm-macros
-BuildRequires:  pkgconfig(libsodium) >= 1.0.18
+BuildRequires:  pkgconfig(libsodium) >= 1.0.21
 Requires:       python-cffi
 # SECTION test requirements
 BuildRequires:  %{python_module hypothesis >= 3.27.0}