Description
Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to any of the versions listed above.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Gerrit | unspecified – < 2.15.22, unspecified – < 2.16.26, unspecified – < 3.0.16, unspecified – < 3.1.12, unspecified – < 3.2.7, unspecified – < 3.3.2 | 2.15.22 |