This document lists the changes between versions of SimpleSAMLphp.
See the upgrade notes for specific information about upgrading.
## Version 1.14.13
Released 2017-04-27
* Resolved a security issue with unauthenticated encryption in the SimpleSAML\Utils\Crypto class. See [SSPSA 201704-01](https://simplesamlphp.org/security/201704-01).
* Added requirement for the Multibyte String PHP extension and the corresponding checks.
* Set a default name for SimpleSAMLphp sessions in the configuration template for the PHP session handler.