Is't that possible to port this fix to hibernate 4.x version? It is likely lot's of users have this bug without realizing where connection is leaked.
So in most cases users just restart their application regularly or using some other work around (for example C3P0 can kill unreturned session after some time) .