diff --git a/CHANGELOG.md b/CHANGELOG.md
index d139d656..c7ca30e5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ The **patch** part changes incrementally at each release.
 
 ### Added
 * apache: the default VHost doesn't redirect to https for ".well-known" paths
+* apt: added buster backports prerferences
 * apt: check if cron is installed before adding a cron job
 * apt: remove jessie/buster sources from Gandi servers
 * apt: verify that /etc/evolinux is present
diff --git a/apt/files/buster_backports_preferences b/apt/files/buster_backports_preferences
new file mode 100644
index 00000000..30fef48d
--- /dev/null
+++ b/apt/files/buster_backports_preferences
@@ -0,0 +1,3 @@
+Package: *
+Pin: release a=buster-backports
+Pin-Priority: 50