@@ -1,6 +1,6 @@

 #

 # Automatically generated file; DO NOT EDIT.

-# Linux/x86 4.4.70 Kernel Configuration

+# Linux/x86 4.4.71 Kernel Configuration

 #

 CONFIG_64BIT=y

 CONFIG_X86_64=y

@@ -908,7 +908,24 @@ CONFIG_NF_NAT_SIP=m

 CONFIG_NF_NAT_TFTP=m

 CONFIG_NF_NAT_REDIRECT=m

 CONFIG_NETFILTER_SYNPROXY=m

-# CONFIG_NF_TABLES is not set

+CONFIG_NF_TABLES=m

+CONFIG_NF_TABLES_INET=m

+CONFIG_NF_TABLES_NETDEV=m

+CONFIG_NFT_EXTHDR=m

+CONFIG_NFT_META=m

+CONFIG_NFT_CT=m

+CONFIG_NFT_RBTREE=m

+CONFIG_NFT_HASH=m

+CONFIG_NFT_COUNTER=m

+CONFIG_NFT_LOG=m

+CONFIG_NFT_LIMIT=m

+CONFIG_NFT_MASQ=m

+CONFIG_NFT_REDIR=m

+CONFIG_NFT_NAT=m

+CONFIG_NFT_QUEUE=m

+CONFIG_NFT_REJECT=m

+CONFIG_NFT_REJECT_INET=m

+# CONFIG_NFT_COMPAT is not set

 CONFIG_NETFILTER_XTABLES=y

 #

@@ -1062,12 +1079,20 @@ CONFIG_IP_VS_PE_SIP=m

 CONFIG_NF_DEFRAG_IPV4=m

 CONFIG_NF_CONNTRACK_IPV4=m

 # CONFIG_NF_CONNTRACK_PROC_COMPAT is not set

+CONFIG_NF_TABLES_IPV4=m

+# CONFIG_NFT_CHAIN_ROUTE_IPV4 is not set

+CONFIG_NFT_REJECT_IPV4=m

+# CONFIG_NFT_DUP_IPV4 is not set

+# CONFIG_NF_TABLES_ARP is not set

 CONFIG_NF_DUP_IPV4=m

 # CONFIG_NF_LOG_ARP is not set

 CONFIG_NF_LOG_IPV4=m

 CONFIG_NF_REJECT_IPV4=m

 CONFIG_NF_NAT_IPV4=m

+# CONFIG_NFT_CHAIN_NAT_IPV4 is not set

 CONFIG_NF_NAT_MASQUERADE_IPV4=m

+# CONFIG_NFT_MASQ_IPV4 is not set

+# CONFIG_NFT_REDIR_IPV4 is not set

 CONFIG_NF_NAT_SNMP_BASIC=m

 CONFIG_NF_NAT_PROTO_GRE=m

 CONFIG_NF_NAT_PPTP=m

@@ -1089,7 +1114,7 @@ CONFIG_IP_NF_TARGET_CLUSTERIP=m

 CONFIG_IP_NF_TARGET_ECN=m

 CONFIG_IP_NF_TARGET_TTL=m

 CONFIG_IP_NF_RAW=m

-# CONFIG_IP_NF_SECURITY is not set

+CONFIG_IP_NF_SECURITY=m

 CONFIG_IP_NF_ARPTABLES=m

 CONFIG_IP_NF_ARPFILTER=m

 CONFIG_IP_NF_ARP_MANGLE=m

@@ -1099,11 +1124,18 @@ CONFIG_IP_NF_ARP_MANGLE=m

 #

 CONFIG_NF_DEFRAG_IPV6=m

 CONFIG_NF_CONNTRACK_IPV6=m

+CONFIG_NF_TABLES_IPV6=m

+CONFIG_NFT_CHAIN_ROUTE_IPV6=m

+CONFIG_NFT_REJECT_IPV6=m

+CONFIG_NFT_DUP_IPV6=m

 CONFIG_NF_DUP_IPV6=m

 CONFIG_NF_REJECT_IPV6=m

 CONFIG_NF_LOG_IPV6=m

 CONFIG_NF_NAT_IPV6=m

-# CONFIG_NF_NAT_MASQUERADE_IPV6 is not set

+CONFIG_NFT_CHAIN_NAT_IPV6=m

+CONFIG_NF_NAT_MASQUERADE_IPV6=m

+CONFIG_NFT_MASQ_IPV6=m

+CONFIG_NFT_REDIR_IPV6=m

 CONFIG_IP6_NF_IPTABLES=m

 CONFIG_IP6_NF_MATCH_AH=m

 CONFIG_IP6_NF_MATCH_EUI64=m

@@ -1120,10 +1152,11 @@ CONFIG_IP6_NF_TARGET_REJECT=m

 CONFIG_IP6_NF_TARGET_SYNPROXY=m

 CONFIG_IP6_NF_MANGLE=m

 CONFIG_IP6_NF_RAW=m

-# CONFIG_IP6_NF_SECURITY is not set

+CONFIG_IP6_NF_SECURITY=m

 CONFIG_IP6_NF_NAT=m

-# CONFIG_IP6_NF_TARGET_MASQUERADE is not set

-# CONFIG_IP6_NF_TARGET_NPT is not set

+CONFIG_IP6_NF_TARGET_MASQUERADE=m

+CONFIG_IP6_NF_TARGET_NPT=m

+# CONFIG_NF_TABLES_BRIDGE is not set

 CONFIG_BRIDGE_NF_EBTABLES=m

 CONFIG_BRIDGE_EBT_BROUTE=m

 CONFIG_BRIDGE_EBT_T_FILTER=m

@@ -2,7 +2,7 @@

 Summary:        Kernel

 Name:           linux

 Version:    	4.4.71

-Release:    	1%{?dist}

+Release:    	2%{?dist}

 License:    	GPLv2

 URL:        	http://www.kernel.org/

 Group:        	System Environment/Kernel

@@ -274,6 +274,8 @@ ln -sf %{name}-%{uname_r}.cfg /boot/photon.cfg

 /usr/share/perf-core

 %changelog

+*   Mon Jun 19 2017 Anish Swaminathan <anishs@vmware.com>  4.4.71-2

+-   [feature] IPV6 netfilter NAT masquerade, security support

 *   Wed Jun 7 2017 Alexey Makhalov <amakhalov@vmware.com> 4.4.71-1

 -   Fix CVE-2017-8890, CVE-2017-9074, CVE-2017-9075, CVE-2017-9076

     CVE-2017-9077 and CVE-2017-9242