diff --git a/doc/releases/migration-guide-3.7.rst b/doc/releases/migration-guide-3.7.rst
index 07d2585fa1687b..707bb01ab2f78d 100644
--- a/doc/releases/migration-guide-3.7.rst
+++ b/doc/releases/migration-guide-3.7.rst
@@ -39,6 +39,12 @@ Boards
 Modules
 *******
 
+MbedTLS
+=======
+
+* The hash algorithms SHA-384, SHA-512, MD5 and SHA-1 are not enabled by default anymore.
+  Their respective Kconfig options now need to be explicitly enabled to be able to use them.
+
 MCUboot
 =======
 
diff --git a/doc/releases/release-notes-3.7.rst b/doc/releases/release-notes-3.7.rst
index bc60d8f3d2c400..2659e536310385 100644
--- a/doc/releases/release-notes-3.7.rst
+++ b/doc/releases/release-notes-3.7.rst
@@ -319,6 +319,9 @@ Libraries / Subsystems
 
 * Crypto
 
+  * MbedTLS was updated to 3.6.0. Release notes can be found at:
+    https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0
+
 * Random
 
   * Besides the existing :c:func:`sys_rand32_get` function, :c:func:`sys_rand8_get`,