updated CHANGELOG for 2.0.17

CHANGELOG-2.0.md

@@ -7,6 +7,34 @@ in 2.0 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v2.0.0...v2.0.1
 
+* 2.0.17 (2012-08-28)
+
+ * 5bf4f92: fixed XML decoding attack vector through external entities
+ * 4e0c992: prevents injection of malicious doc types
+ * 47fe725: disabled network access when loading XML documents
+ * c896d71: refined previous commit
+ * a2a6cdc: prevents injection of malicious doc types
+ * 865461d: standardized the way we handle XML errors
+ * 352e8f5: Redirects are now absolute
+ * 9a355e9: [HttpKernel] excluded a test on PHP 5.3.16, which is buggy (PHP, not Symfony ;))
+ * f694615: [Process] fix ProcessTest::testProcessPipes hangs on Windows on branch 2.0
+ * 9beffff: [HttpKernel] KernelTest::testGetRootDir fails on Windows for branch 2.0
+ * e49afde: Update monolog compatibility
+ * 832f8dd: Add support for Monolog 1.2.0
+ * c51fc10: avoid fatal error on invalid session
+ * 1a4a4ee: [DependencyInjection] Fixed a frozen constructor of a container with no parameters
+ * b3cf36a: [Config] Missing type argument passed to loader.
+ * 55a0b34: Fixes incorrect class used in src/Symfony/Bundle/FrameworkBundle/Console/Application.php
+ * a0709fc: [DoctrineBridge] Fix log of non utf8 data
+ * 0b78fdf: Only call registerCommand on bundles that is an instance of Bundle
+ * 9e28593: fixed error on oracle db related to clob data.
+ * 9f4178b: [Validator] Fixed: StaticMethodLoader does not try to invoke methods of interfaces anymore
+ * 2a3235a: [Validator] Fixed group sequence support in the XML and YAML drivers
+ * 4f93d1a: [Console] Use proc_open instead of exec to suppress errors when run on windows and stty is not present
+ * 16a980b: [Validator] Fix bug order for constraint, property, getter and group-sequence-provider in validation.xml
+ * ed8823c: [HttpFoundation] Allow setting an unknown status code without specifying a text
+ * e9d799c: [Routing] fixed ApacheUrlMatcher and ApachMatcherDumper classes that did not take care of default parameters in urls.
+
 * 2.0.16 (2012-07-11)
 
  * 854daa8: [Form] Fixed errors not to be added onto non-synchronized forms