diff --git a/ChangeLog b/ChangeLog
index bca38b54f..02c3bb2d1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -98,6 +98,7 @@ Changes
    * Change wording in the `mbedtls_ssl_conf_max_frag_len()`'s documentation to
      improve clarity. Fixes #2258.
    * Replace multiple uses of MD2 by SHA-256 in X.509 test suite. Fixes #821.
+   * Make `make clean` clean all programs always. Fixes #1862.
 
 = mbed TLS 2.17.0 branch released 2019-03-19
 
diff --git a/programs/Makefile b/programs/Makefile
index 14ba54393..a91440719 100644
--- a/programs/Makefile
+++ b/programs/Makefile
@@ -300,6 +300,8 @@ x509/req_app$(EXEXT): x509/req_app.c $(DEP)
 clean:
 ifndef WINDOWS
 	rm -f $(APPS)
+	-rm -f ssl/ssl_pthread_server$(EXEXT)
+	-rm -f test/cpp_dummy_build$(EXEXT)
 else
 	del /S /Q /F *.o *.exe
 endif