jboss netty

Hi Guys,

Got my container image scanned, it got jboss netty vulnerability.

Can I update the jboss netty on the s2i/bin/assemble "run update command" or I need to update it on the base image?

Thanks.

Ricky