Updates to Counter-Strike and the Half-Life 1: Engine have been released. The updates will be applied automatically when your Steam client is restarted. The specific changes include:

Half-Life 1: Engine

• Servers will default to starting up using VAC2


• Added "sv_uploadmax" cvar to limit the max size (in MB) a client can use for a custom resource (i.e spray decals)


• Added "-sport" command line option to allow you to specify the VAC2 port the server should use


• Don't allow servers to execute "alias" commands on clients (prevents an infinite loop exploit using alias commands from servers)


• Fixed S2C_CONNREJECT packet exploit causing the game to quit from any currently connected game server (found by Gavin Cotter)


• Fixed crash exploit caused by specially crafted packet triggering a crash in the resource upload code (found by Gavin Cotter)


• Fixed infinite loop in richtext/textentry control caused by large sets of spaces between words wrapping around line ends (found by Kristian Hermansen)


• Fixed possible lockup when refreshing a login ticket


• Disabled old style server queries by default.

Counter-Strike

• Fixed menu exploit on join that spawned you into the server but moved you around as you were in spectator mode