The fix was in https://github.com/ARMmbed/mbedtls/pull/4989. We forgot to add a changelog entry. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>