Is it OK to stabilize =www-apache/modsecurity-crs-2.2.5 ? If so, please CC all arches which have stable keywords for older versions of this package and add STABLEREQ keyword to the bug.
amd64 stable
ppc done
x86 stable
sparc stable