update Changelog

ChangeLog

@@ -1,15 +1,18 @@
 For detailed changes, see the changes either in the OpenBSD CVS repository or
 the GitHub mirror.
 
-2019-XX-XX  OpenNTPD 6.5p0
-
+OpenNTPD 6.7p0
+
+	* ntpd now does constraint validation against 9.9.9.9 and 2620:fe::fe by default.
+	* The ntpd daemon now gets and sets the clock in a secure way when booting
+	  even when a battery-backed clock is absent.
+	* Improvements in DNS resolving and constraints checking, especially during
+	  startup. Unreliable NTP peers are removed from the pool and DNS resolving
+	  is repeated to add replacements.
 	* Improved reliability and security of TLS constraint checking.
-
 	* Improved logging of failure cases.
-
 	* Prevent the case of multiple ntpds running at once by checking presence
 	  of the local control socket.
-
 	* TLS certificates are now searched in TLS_CA_CERT_FILE.
 
 2017-09-17  OpenNTPD 6.2p3