Updates to Team Fortress 2 have been released. The updates will be applied automatically when your Steam client is restarted. The major changes include:

Engine


Added checks to prevent transferring .smx, .gcf, and .sys files between client/server

Fixed upload/download exploits with spaces in the file extension or a path separator at the beginning of the requested file (as reported on the HLDS mailing lists)


Team Fortress 2

Fixed custom particle systems inside maps causing particles to break in successive maps

Fixed a rare vphysics crash

Fixed background highlight for KOTH timers not being aligned properly in minmode

Fixed the Heavy's fists being hidden while taunting

Fixed cloaked Spies having the critboost effect on their weapon

Fixed banned clients being able to spamming a server with the "joined" chat text

Fixed seeing the wrong class counts if the game swapped teams while the class menu was open

Fixed Spies being able to disguise while performing a taunt

Fixed having to press the voice menu key twice if the menu timed out and closed itself last time it was open

Fixed the "Confirm Delete" dialog in the Items menu not handling the key correctly

Fixed dispenser not healing players at the correct rate if it's upgraded while the players are already touching the dispenser

Fixed exec'ing the .cfg file for a class change before the player has actually changed class