diff --git a/docs/simplesamlphp-upgrade-notes-1.14.md b/docs/simplesamlphp-upgrade-notes-1.14.md
index dc7eda6b4e4120b5d934e4f26e8096a1c17e55cd..9931225c49e46085c52f80ee5a5037862d537059 100644
--- a/docs/simplesamlphp-upgrade-notes-1.14.md
+++ b/docs/simplesamlphp-upgrade-notes-1.14.md
@@ -5,6 +5,8 @@ The `mcrypt` extension is no longer required by SimpleSAMLphp, so if no signatur
 can be skipped. It is still a requirement for `xmlseclibs` though, so for those verifying or creating signed
 documents, or using encryption, it is still needed.
 
+The `mbstring` extension is now required starting on SimpleSAMLphp 1.14.12.
+
 PHP session cookies are now set to HTTP-only by default. This relates to the `session.phpsession.httponly`
 configuration option.