Which implementation? tls1_cbc_remove_padding (which removes the almost but not quite PKCS5 padding in TLS) was specifically updated with constant time fixes to mitigate Lucky 13. Maybe they didn't copy this over to the PKCS5/7 verification too?