What does it mean "retire these modules"? I guess you mean retire the builds. If that's so, please do that.

What will happen with the builds that were already shipped to mirrors? What's the remedy? A rebuild with only-changed strategy? Or do I have to use rebuild-all strategy to prevent from reusing the affected artifacts?

@ppisar yes, I meant retire those builds. Once the affected builds are retired, you can rebuild your module like normal and the components should be reused from the correct module. The retired build will be ignored during checks for component reuse.

Done.

That's great. I only have a more work for you. I've just finished building perl:5.28:xx 20190912134325 that seems also affected:

https://mbs.fedoraproject.org/module-build-service/2/module-builds/6396
https://mbs.fedoraproject.org/module-build-service/2/module-builds/6397
https://mbs.fedoraproject.org/module-build-service/2/module-builds/6398

Please retire them too.

Please notify me when MBS is fixed. A post here is enough.

@ppisar MBS is hotfixed in production. Please let me know if you experience any more issues.

That's great. I only have a more work for you. I've just finished building perl:5.28:xx 20190912134325 that seems also affected:
https://mbs.fedoraproject.org/module-build-service/2/module-builds/6396
https://mbs.fedoraproject.org/module-build-service/2/module-builds/6397
https://mbs.fedoraproject.org/module-build-service/2/module-builds/6398
Please retire them too.

These are included in the initial ticket description and are retired as well.

@mprahl , please rebuild those modules and edit bodhi updates.

@ignatenkobrain I'm sorry, but I don't have permission to that repo or Bodhi update. If for some reason you can't do it yourself, maybe @mohanboddu could help out.

You need to do the following:

fedpkg clone modules/silver
cd silver
git commit -m "Bump" --allow-empty
fedpkg push
fedpkg module-build -w

Then you need to edit the Bodhi update(s).

Let me know if I need to build them.