From 514f8c3c7ebfe5280fa9fa90f69e76865f667cad Mon Sep 17 00:00:00 2001
From: Asterisk Development Team <asteriskteam@digium.com>
Date: Thu, 9 Jan 2025 20:21:51 +0000
Subject: [PATCH] Update for certified-18.9-cert13

---
 .version                                      |  2 +-
 CHANGES.md                                    |  2 +-
 ChangeLogs/ChangeLog-certified-18.9-cert13.md | 65 +++++++++++++++++++
 3 files changed, 67 insertions(+), 2 deletions(-)
 create mode 100644 ChangeLogs/ChangeLog-certified-18.9-cert13.md

diff --git a/.version b/.version
index 51b2e62928..149ddbdcfa 100644
--- a/.version
+++ b/.version
@@ -1 +1 @@
-certified-18.9-cert12
+certified-18.9-cert13
diff --git a/CHANGES.md b/CHANGES.md
index 7bbd30b45a..355e124e59 120000
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1 +1 @@
-ChangeLogs/ChangeLog-certified-18.9-cert12.md
\ No newline at end of file
+ChangeLogs/ChangeLog-certified-18.9-cert13.md
\ No newline at end of file
diff --git a/ChangeLogs/ChangeLog-certified-18.9-cert13.md b/ChangeLogs/ChangeLog-certified-18.9-cert13.md
new file mode 100644
index 0000000000..a00ccde599
--- /dev/null
+++ b/ChangeLogs/ChangeLog-certified-18.9-cert13.md
@@ -0,0 +1,65 @@
+
+## Change Log for Release asterisk-certified-18.9-cert13
+
+### Links:
+
+ - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-certified-18.9-cert13.md)  
+ - [GitHub Diff](https://github.com/asterisk/asterisk/compare/certified-18.9-cert12...certified-18.9-cert13)  
+ - [Tarball](https://downloads.asterisk.org/pub/telephony/certified-asterisk/asterisk-certified-18.9-cert13.tar.gz)  
+ - [Downloads](https://downloads.asterisk.org/pub/telephony/certified-asterisk)  
+
+### Summary:
+
+- Commits: 1
+- Commit Authors: 1
+- Issues Resolved: 0
+- Security Advisories Resolved: 1
+  - [GHSA-33x6-fj46-6rfh](https://github.com/asterisk/asterisk/security/advisories/GHSA-33x6-fj46-6rfh): Path traversal via AMI ListCategories allows access to outside files
+
+### User Notes:
+
+- #### manager.c: Restrict ListCategories to the configuration directory.              
+  The ListCategories AMI action now restricts files to the
+  configured configuration directory.
+
+
+### Upgrade Notes:
+
+
+### Commit Authors:
+
+- Ben Ford: (1)
+
+## Issue and Commit Detail:
+
+### Closed Issues:
+
+  - !GHSA-33x6-fj46-6rfh: Path traversal via AMI ListCategories allows access to outside files
+
+### Commits By Author:
+
+- #### Ben Ford (1):
+  - manager.c: Restrict ListCategories to the configuration directory.
+
+
+### Commit List:
+
+-  manager.c: Restrict ListCategories to the configuration directory.
+
+### Commit Details:
+
+#### manager.c: Restrict ListCategories to the configuration directory.
+  Author: Ben Ford
+  Date:   2024-12-17
+
+  When using the ListCategories AMI action, it was possible to traverse
+  upwards through the directories to files outside of the configured
+  configuration directory. This action is now restricted to the configured
+  directory and an error will now be returned if the specified file is
+  outside of this limitation.
+
+  Resolves: #GHSA-33x6-fj46-6rfh
+
+  UserNote: The ListCategories AMI action now restricts files to the
+  configured configuration directory.
+