OpenSSL released several security advisories yesterday: http://www.openssl.org/news/secadv_20140605.txt. None of these are attacks on the SSL/TLS protocols themselves. They are all implementation bugs. Most are critical bug fixes to DTLS (TLS over UDP). As a clean room implementation of SSL, wolfSSL does not use any OpenSSL code and is free from these defects. The most critical report seems to be the Man in the Middle vulnerability where an attacker can inject a Change Cipher Spec message to force a weak key stream (CVE-2014-0224). wolfSSL does not create the keying material upon receipt of the Change Cipher Spec message as OpenSSL did/does and is free from this problem.
The purpose of this note is not to critique OpenSSL, but rather to inform our user base about how they may be affected. For additional information or questions about CyaSSL please contact us at facts@wolfssl.com