commons-collections-3.2.1.jar

I am running TeamCity 9.1.6. Our internal security scan flagged commons-collections-3.2.1.jar as security risk (something to do with a deserialization vulerability) and are asking me to update the file to commons-collections-3.2.2.jar.

I have a limited knowledge of Java - can I just replace the file? 

Or do you have a patch?

Thanks

Jay Turpin

Intel Corporation