diff --git a/docs/releasenotes.rst b/docs/releasenotes.rst
index 3961f395604a5fb73c31e4806d703a72da835f63..042f144430ecabae944a5bcbacd3375c1be06677 100644
--- a/docs/releasenotes.rst
+++ b/docs/releasenotes.rst
@@ -17,10 +17,15 @@ Upgraded to Ansible 10.4.x. Dropped support for Debian 11
   * ``passlib`` Python package is now (explicitly) required for using
     the roles.
 
+* ``ldap_server`` role
+
+  * The role no longer officially supports older versions of TLS
+    (TLSv1.1 and lower).
+
 * ``web_server`` role
 
   * The role no longer officially supports older versions of TLS
-    (TLSv1.1 and below).
+    (TLSv1.1 and lower).
 
 **New features/improvements**
 
@@ -29,6 +34,11 @@ Upgraded to Ansible 10.4.x. Dropped support for Debian 11
   * Switched to using Paramiko + SFTP backend (instead of pexpect +
     SFTP), which should improve the backup performance.
 
+* ``ldap_server`` role
+
+  * TLSv1.3 is now enabled by default (in addition to TLSv1.2),
+    alongside the mandatory ciphers.
+
 * ``web_server`` role
 
   * TLSv1.3 is now enabled by default (in addition to TLSv1.2),