This release fixes the bug allowing some non-protected pages to be accessed under https protocol. Also, the option to allow secure controllers will work for logged-in users only, preventing the wrong usage of the option that could harm your search engine ranking.
Please re-upload product files and re-import the XML file to apply the fix.