Second release candidate for mod_security 1.8.7 is available for download. I performed a detailed code review (of the new and affected code), fixed small bugs and tightened the code in few places. The fact there are two release candidates this time is a sign mod_security has matured. With a large number of productions deployments I am becoming very conservative with changes. At this point RC2 is pretty much the next stable release minus the documentation. As soon as the documentation is ready I will release 1.8.7.