From f76a30b577140fb63861afd0aa17ebef014b09ee Mon Sep 17 00:00:00 2001
From: Koichiro Iwao <meta@vmeta.jp>
Date: Fri, 29 May 2026 17:53:05 +0900
Subject: [PATCH] CVE-2026-55626: Disable Xvnc TCP listning in UDS mode

---
 sesman/sesexec/session.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sesman/sesexec/session.c b/sesman/sesexec/session.c
index 7d49b6fa..7879d346 100644
--- a/sesman/sesexec/session.c
+++ b/sesman/sesexec/session.c
@@ -650,6 +650,7 @@ prepare_xvnc_xserver_params(const struct session_data *sd,
                        "%d", 0660); /* rw-rw---- */
 
             list_add_strdup_multi(params,
+                                  "-rfbport", "-1",
                                   "-rfbunixpath", port,
                                   "-rfbunixmode", sock_mode,
                                   "-SecurityTypes", "None",