diff --git a/package/apr/apr.hash b/package/apr/apr.hash
index 7d231ee7cc57..1d4ba31ab23b 100644
--- a/package/apr/apr.hash
+++ b/package/apr/apr.hash
@@ -1,4 +1,4 @@
-# From https://archive.apache.org/dist/apr/apr-1.7.5.tar.bz2.sha256
-sha256  cd0f5d52b9ab1704c72160c5ee3ed5d3d4ca2df4a7f8ab564e3cb352b67232f2  apr-1.7.5.tar.bz2
+# From https://archive.apache.org/dist/apr/apr-1.7.6.tar.bz2.sha256
+sha256  49030d92d2575da735791b496dc322f3ce5cff9494779ba8cc28c7f46c5deb32  apr-1.7.6.tar.bz2
 # Locally calculated
 sha256  f854aeef66ecd55a126226e82b3f26793fc3b1c584647f6a0edc5639974c38ad  LICENSE
diff --git a/package/apr/apr.mk b/package/apr/apr.mk
index d5b132658a1e..1c7553a501a6 100644
--- a/package/apr/apr.mk
+++ b/package/apr/apr.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-APR_VERSION = 1.7.5
+APR_VERSION = 1.7.6
 APR_SOURCE = apr-$(APR_VERSION).tar.bz2
 APR_SITE = https://archive.apache.org/dist/apr
 APR_LICENSE = Apache-2.0