diff --git a/CHANGELOG.md b/CHANGELOG.md
index e8a249ad..1de94487 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,56 +12,67 @@ The **patch** part changes is incremented if multiple releases happen the same m
 
 ### Added
 
-* all: Use proper keyrings directory for APT version
-* all: Add signed-by option for additional APT sources
+### Changed
+
+### Fixed
+
+### Removed
+
+### Security
+
+## [22.12] 2022-12-14
+
+### Added
+
+* all: add signed-by option for additional APT sources
 * all: preliminary work to support Debian 12
+* all: use proper keyrings directory for APT version
 * evolinux-base: replace regular kernel by cloud kernel on virtual servers
-* lxc-php: set php-fpm umask to 007
-* nagios-nrpe: check_ceph_*
-* nagios-nrpe: check_haproxy_stats supports DRAIN status
-* packweb-apache: enable log_forensic module
-* varnish: create special tmp directory for syntax validation
+* lxc-php: set php-fpm umask to `007`
+* nagios-nrpe: `check_ceph_*`
+* nagios-nrpe: `check_haproxy_stats` supports DRAIN status
+* packweb-apache: enable `log_forensic` module
 * rabbitmq: add link in default page
+* varnish: create special tmp directory for syntax validation
 
 ### Changed
 
 * certbot: auto-detect HAPEE version in renewal hook
 * evocheck: install script according to Debian version
-* evolinux-base: utils.yml can be excluded
+* evolinux-base: `utils.yml` can be excluded
 * evolinux-todo: execute tasks only for Debian distribution (because this task is a dependency for others roles used on different distributions)
-* evolinux-user: Add sudoers privilege for check php\_fpm81
+* evolinux-user: add sudoers privilege for check `php_fpm81`
 * evomaintenance: allow missing API endpoint if APi is disabled
 * java: use default JRE package when version is not specified
+* keepalived: change exit code (_warning_ if running but not on expected state ; _critical_ if not running)
 * listupgrade: better detection for PostgreSQL
 * listupgrade: sort/uniq of packages/services lists in email template
 * lxc-solr: detect the real partition options
 * lxc-solr: download URL according to Solr Version
 * lxc-solr: set homedir and port at install
 * minifirewall: whitelist deb.freexian.com
+* openvpn: shellpki upstream release 22.12.2
+* openvpn: specifies that the mail for expirations is for OpenVPN
 * packweb-apache: manual dependencies resolution
 * redis: some values should be quoted
 * redis: variable to disable transparent hugepage (default: do nothing)
-* squid: whitelist deb.freexian.com
+* squid: whitelist `deb.freexian.com`
 * varnish: better package facts usage with check mode and tags
 * varnish: systemd override depends on Varnish version instead of Debian version
-* keepalived: change exit code (warning if running but not on expected state ; critical if not running)
-* openvpn: shellpki upstream release 22.12.2
-* openvpn: specifies that the mail for expirations is for OpenVPN
 
 ### Fixed
 
-* evolinux-user: Fix sudoers privilege for check php\_fpm80
+* evolinux-user: Fix sudoers privilege for check `php_fpm80`
 * nagios-nrpe: Fix check opendkim for recent change in listening port
-* varnish: fix missing state, that blocked the task
-* proftpd: Fix format of public key files controlled by ansible
-* proftpd: Fix mode of public key directory and files (they have to be accessible by proftpd:nobody)
 * openvpn: Fix mode of shellpki script
+* proftpd: Fix format of public key files controlled by Ansible
+* proftpd: Fix mode of public key directory and files (they have to be accessible by `proftpd:nobody`)
+* varnish: fix missing state, that blocked the task
 
 ### Removed
 
 * openvpn: Deleted the task fixing the CRL rights since it has been fixed in upstream
 
-### Security
 
 ## [22.09] 2022-09-19