Ah okay, I assumed that the firewalld patch (the issue tracked in bsc#1180401) was only broken on SLES not Leap. The solution is to change the fix from %if 0%{?is_opensuse} to the relevant check for Tumblweed only. I will take a look at this on Monday.