diff --git a/CHANGELOG b/CHANGELOG
index 953d0650106fa763db3e76c7277b711b7c83f2d2..52e39157a7f0db907d4647efe35e28b897d069b7 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -5,3 +5,8 @@
 2018-02-16: readded tunnel alias
 2018-07-11: added parameter for missing IPSec SA, changed 'parsed' to use peer ip as index
 2021-08-03: rewritten for CMK 2.0
+2021-11-03: fix negative vpn active tine
+2022-01-19: added workaround for not matching IKE_OID_end and cipSecTunIkeTunnelIndexfor not matching
+            IKE_OID_end and cipSecTunIkeTunnelIndex, try to match IPSec nad IKE sa by remote address
+2022-04-01: changed IPSec SA count output to check levels
+2022-12-17: check input values for isdigit()