I don't think puppet-3.x was effected
We'll need stablereqs for the following.
Maintainer(s), please cleanup.
cleaned up, removing myself from cc
Added to an existing GLSA Request.
This issue was resolved and addressed in
GLSA 201606-02 at https://security.gentoo.org/glsa/201606-02
by GLSA coordinator Yury German (BlueKnight)