diff --git a/docs/simplesamlphp-changelog.md b/docs/simplesamlphp-changelog.md
index 8417a1e0d231c4c0e0d2f10b2d6a6b18400d15f9..0c55209d4ec5632fc5e55cdff5c121706b16dc01 100644
--- a/docs/simplesamlphp-changelog.md
+++ b/docs/simplesamlphp-changelog.md
@@ -6,6 +6,14 @@ SimpleSAMLphp changelog
 This document lists the changes between versions of SimpleSAMLphp.
 See the upgrade notes for specific information about upgrading.
 
+## Version 1.14.13
+
+Released 2017-04-27
+
+  * Resolved a security issue with unauthenticated encryption in the SimpleSAML\Utils\Crypto class. See [SSPSA 201704-01](https://simplesamlphp.org/security/201704-01).
+  * Added requirement for the Multibyte String PHP extension and the corresponding checks.
+  * Set a default name for SimpleSAMLphp sessions in the configuration template for the PHP session handler.
+  
 ## Version 1.14.12
 
 Released 2017-03-30