This may be outdated already to some extent.
According to jira.cyanogenmod.org "KitKat does not use JSSE - Android 4.4 is not affected." So Cyanogenmod 11S for example would not be affected.
https://jira.cyanogenmod.org/browse/BACON-1687?jql=text%20~%20%22man%20in%20the%20middle%22
Biting the hand that feeds IT
