Updates to Counter-Strike and the Half-Life 1: Engine have been released. The updates will be applied automatically when your Steam client is restarted. The specific changes include:

• Servers will default to starting up using VAC2
  
• Added "sv_uploadmax" cvar to limit the max size (in MB) a client can use for a custom resource (i.e spray decals)
  
• Added "-sport" command line option to allow you to specify the VAC2 port the server should use
  
• Don't allow servers to execute "alias" commands on clients (prevents an infinite loop exploit using alias commands from servers)
  
• Fixed S2C_CONNREJECT packet exploit causing the game to quit from any currently connected game server (found by Gavin Cotter)
  
• Fixed crash exploit caused by specially crafted packet triggering a crash in the resource upload code (found by Gavin Cotter)
  
• Fixed infinite loop in richtext/textentry control caused by large sets of spaces between words wrapping around line ends (found by Kristian Hermansen)
  
• Fixed possible lockup when refreshing a login ticket
  
• Disabled old style server queries by default.
  

• Fixed menu exploit on join that spawned you into the server but moved you around as you were in spectator mode