This hotfix should only be applied on top of SBM 11.5. If you are running a different version or if you have already installed a different SBM 11.5 hotfix, contact Serena Support. Please note that these CVE's are also fixed in SBM 11.4.2 - please go to the Support Site downloads section if you require this version..
2.3 Serena Mashup Composer – General Changes made to a "parent" workflow are correctly reflected in its sub-workflows even after they are checked out from the repository. The "Delete Attachments You Authored" privilege for attachments to auxiliary items is listed correctly in the role editor. Mashup Composer retains the workspace layout you set up while editing roles.