Index: Makefile
===================================================================
RCS file: /cvsroot/pkgsrc/devel/ncurses/Makefile,v
retrieving revision 1.118
diff -u -p -r1.118 Makefile
--- Makefile	8 Apr 2025 16:43:09 -0000	1.118
+++ Makefile	22 Jun 2025 07:27:43 -0000
@@ -1,6 +1,7 @@
 # $NetBSD: Makefile,v 1.118 2025/04/08 16:43:09 nia Exp $
 
 DISTNAME=	ncurses-6.5
+PKGREVISION=	1
 CATEGORIES=	devel
 MASTER_SITES=	${MASTER_SITE_GNU:=ncurses/}
 
Index: distinfo
===================================================================
RCS file: /cvsroot/pkgsrc/devel/ncurses/distinfo,v
retrieving revision 1.53
diff -u -p -r1.53 distinfo
--- distinfo	6 May 2024 08:24:05 -0000	1.53
+++ distinfo	22 Jun 2025 07:27:43 -0000
@@ -6,3 +6,4 @@ Size (ncurses-6.5.tar.gz) = 3688489 byte
 SHA1 (patch-misc_run__tic.in) = a6a8dd89da1a2fbbc5fcabfa6d41ce3a41b75722
 SHA1 (patch-ncurses_base_lib_initscr.c) = 3f47c8ce9b98a82aa8db6b6da55810727559d30c
 SHA1 (patch-ncurses_tinfo_lib_raw.c) = 1adea51819538433b681c209f9754a18d0e37ebb
+SHA1 (patch-ncurses_tinfo_parse_entry.c) = ef0f6be1a1b1cdd39b04cf899558e0fcd9578dc3
Index: patches/patch-ncurses_tinfo_parse_entry.c
===================================================================
RCS file: patches/patch-ncurses_tinfo_parse_entry.c
diff -N patches/patch-ncurses_tinfo_parse_entry.c
--- /dev/null	1 Jan 1970 00:00:00 -0000
+++ patches/patch-ncurses_tinfo_parse_entry.c	22 Jun 2025 07:27:43 -0000
@@ -0,0 +1,16 @@
+$NetBSD$
+
+Cherry picked fix for CVE-2025-6141 from
+https://invisible-island.net/archives/ncurses/6.5/ncurses-6.5-20250329.patch.gz
+
+--- ncurses/tinfo/parse_entry.c.orig	2023-04-24 22:32:33.000000000 +0000
++++ ncurses/tinfo/parse_entry.c	2025-06-22 07:14:15.542701527 +0000
+@@ -985,6 +985,8 @@
+ 	    bp = tp->Strings[from_ptr->nte_index];
+ 	    if (VALID_STRING(bp)) {
+ 		for (dp = buf2; *bp; bp++) {
++		    if ((size_t) (dp - buf2) >= (sizeof(buf2) - sizeof(TERMTYPE2)))
++			  break;
+ 		    if (bp[0] == '$' && bp[1] == '<') {
+ 			while (*bp && *bp != '>') {
+ 			    ++bp;