May 2025 Patch
Hello everyone,
A new patch has been released. This one contains mostly stability and security fixes.
Servers and clients are recommended to update as soon as possible.
The change list is as follows:
Throw a non halting Lua error when hitting Lua file limit, to let players know that they have hit the limit
Fixed a regression crash on Linux when almost finished loading a map
Prevent crashes with steamworks library when used too early on dedicated servers
Fixed console spam about invalid sprite orientation when the sprite material is simply missing
Fixed HLTV clients being kicked due to mismatching SteamID
Fixed a crash to do with env_projected_texture's texture
Fixed some security issues reported on HackerOne
Remove unnecessary return value in WorldPickerMouseDisable hook so GM:VGUIMousePressAllowed hook works more reliably for addons (Community Contribution)
Fixed Lua error with creator tool when trying to spawn NPCs that do not exist on the server (Community Contribution)
Blocked .vdf and specific .cfg files from being accessible by the Lua file library
Added one more known Lua backdoor URL to HTTP blacklist
Increased default value of mem_max_heapsize to 512, and block it from being changed by Lua API
Block datacachesize convar from being changed by Lua API, to prevent crashes when set to invalid values
Fixed monitor (and potentially other) materials in Hammer acting strangely when using "Fit" option in texture application tool.
The entire change list can also be found on our website:
https://gmod.facepunch.com/news/may-2025-patch