puppet: patch PUP-3564