From predisclosure-applications-bounces@lists.xenproject.org Mon Aug 31 21:13:24 2026 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 31 Aug 2026 21:13:24 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1404385.1638100 (Exim 4.92) (envelope-from ) id 1x19Jh-0003pe-O8; Mon, 31 Aug 2026 21:13:21 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1404385.1638100; Mon, 31 Aug 2026 21:13:21 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x19Jh-0003pa-LG; Mon, 31 Aug 2026 21:13:21 +0000 Received: by outflank-mailman (input) for mailman id 1404385; Mon, 31 Aug 2026 21:13:20 +0000 Received: from mx.expurgate.net ([194.145.224.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x19Jg-0003pU-6a for predisclosure-applications@lists.xenproject.org; Mon, 31 Aug 2026 21:13:20 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x19Je-00CEmN-FL; Mon, 31 Aug 2026 23:13:18 +0200 Received: from [10.42.69.11] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a95ee4d-8faa-0a2a0a5109dd-0a2a450bc224-24 for ; Mon, 31 Aug 2026 23:13:17 +0200 Received: from [148.163.154.146] (helo=mx0b-002b1501.pphosted.com) by tlsNG-42698a.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a95ee6b-b7e8-0a2a450b0019-94a39a9298ae-3 for ; Mon, 31 Aug 2026 23:13:17 +0200 Received: from pps.filterd (m0119679.ppops.net [127.0.0.1]) by mx0b-002b1501.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 67VIcvbV3148055; Mon, 31 Aug 2026 16:13:13 -0500 Received: from mw6pr02cu001.outbound.protection.outlook.com (mail-westus2azon11012044.outbound.protection.outlook.com [52.101.48.44]) by mx0b-002b1501.pphosted.com (PPS) with ESMTPS id 4gbtg0pfqr-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Mon, 31 Aug 2026 16:13:12 -0500 (CDT) Received: from PH7PR17MB7026.namprd17.prod.outlook.com (2603:10b6:510:236::18) by SJ2PR17MB6496.namprd17.prod.outlook.com (2603:10b6:a03:4fc::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Mon, 31 Aug 2026 21:13:10 +0000 Received: from PH7PR17MB7026.namprd17.prod.outlook.com ([fe80::a046:9950:946c:14dd]) by PH7PR17MB7026.namprd17.prod.outlook.com ([fe80::a046:9950:946c:14dd%3]) with mapi id 15.21.0360.008; Mon, 31 Aug 2026 21:13:10 +0000 X-BeenThere: predisclosure-applications@lists.xenproject.org List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: predisclosure-applications-bounces@lists.xenproject.org Precedence: list Sender: "Predisclosure-applications" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=2k26 header.d=epic.com header.i="@epic.com" header.h="CC:Content-Type:Date:From:In-Reply-To:Message-ID:MIME-Version:References:Subject:To"; dkim=pass header.s=selector1 header.d=epic.com header.i="@epic.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:x-ms-exchange-senderadcheck" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=epic.com; h=cc :content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to; s=2k26; bh=J9Kg6qbociE9uPIlJLDl5yqjwjRgX 14FIC1rtCStZKo=; b=sV2Pa6IldVmh//zzVOj7EMg6oqzxYHrYB+RY8qwVtBYD9 MfSsW0xdeqQXzRuhhQQZ8jvcLivwjDJkTsSq4XXfedhzE07X4Ht8yx5j4SkHTfV1 D0+WNW1Am/2Wo6SuoRgbyUdVENiXhZyrUmuJhKuqib5qlpuM1KQpRizBKwCDHhgm 5o3OaP7gH0OTSJmS3rZ2uXKw2eEvMoKBZEyxx+wxGnth190GC2Z8tNJNykuvFB/e ys/3UAay4n4GVys4GU9zSDARhEEqxEA3JBzesi0HJADw1yXMr1CxtYg9S2M5hBg8 jbt1FH+Y6J3PuCXeqawEb0a75Rqxy1cDYLjU7oZbA== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=dDnYDp100sA8YBBYrTvlzv5ePkRWYuX/8SnDYHWtHU3KkEREWZlHbRSmMLhS+dITlNdt7ndjGP/UDiV7cHh7ySHMenViBXF64fnwCU6dPXxq2YUT7naA1pSA8Hq/419Iyju62sKZusJsj+KrXDVHlqvsoz1XXn+dpW76XPSp5txXhNcWuq5hCPBWKDhSjCP2bPLVkXmrvl70LOYd2UlysSGEVdJPIj23JvVrqoQYemp6NnxwQJ5CzD9No47JMJ3YgwOVtw7RRCy25vYqvGl4Wovq2u+Ce1H+5FJfX3JNW7rzLcx7iPPtL7P/YD3X24C1Ou+Pf/f0OX4bjtKTMmRRBw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=J9Kg6qbociE9uPIlJLDl5yqjwjRgX14FIC1rtCStZKo=; b=InRZHacvK6mW9uGLDc38itTgToofTvvITsEao8+Kv/CKIuDjWz3WjAGOc88C6mdfR3WzcwExrc+BeghcrnN+PuQAgcYjh1iW7vQw8eCnjksuxP9jSJHkscn0O2e8A64C7mwE/Bxpt+YITXKYXJM4PHvtQgOK8dOGJCFNL/UD6Ge9NwViJNuEMuI9368ySPORsvEqkcF4fVvvcBalDSEuFGZOaCxPIIzkmXRporVGVsMWOHbEe90END2+4p0pitNMgN4/tsQOC4H4wPYinZXsGQpXzoM1sh0KyHH9IvbGxlxwP7IF97rkz4vU4NE63Z+/Ge7L69y4UPcVyql1SO8v9w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=epic.com; dmarc=pass action=none header.from=epic.com; dkim=pass header.d=epic.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=epic.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=J9Kg6qbociE9uPIlJLDl5yqjwjRgX14FIC1rtCStZKo=; b=B3d67UTCN/zFj6bpIV5SIbQu92uC/47hdIJ+zGbftPjZLl/jT8uR1ZAek1x5x3wliPZuqlf34khrOXzLxkGynYrwdZSSISzTM6L5fQ/Bq4ejwOoTFkkglJZrHtvNZqnJAJ5fb4stliik3ZZpnCAJj09cQosiQA41D4C1jz3NxSs= From: Jake Vondra To: Darryl Voss , Andrew Cooper , "predisclosure-applications@lists.xenproject.org" CC: "alex.brett@citrix.com" Subject: RE: Epic Hosting - Xen Pre-Disclosure Submission Thread-Topic: Epic Hosting - Xen Pre-Disclosure Submission Thread-Index: AdzuwttRETC9w6WvTPmhZ/dQ5WoDwAh5egaAALoSECQJfxh+UA== Date: Mon, 31 Aug 2026 21:13:10 +0000 Message-ID: References: <53bfb914-1219-4fc6-a44d-ed25c8004879@xen.org> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-Mentions: andrew@xen.org X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: PH7PR17MB7026:EE_|SJ2PR17MB6496:EE_ x-ms-office365-filtering-correlation-id: bbd86786-4ea1-4fa5-4faa-08df07a4a922 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|23010399003|1800799024|366016|38070700021|4143699003|10067099003|11063799006|5023799004|56012099006|3023799007|18002099003|22082099003|8096899003|13003099007; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH7PR17MB7026.namprd17.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(23010399003)(1800799024)(366016)(38070700021)(4143699003)(10067099003)(11063799006)(5023799004)(56012099006)(3023799007)(18002099003)(22082099003)(8096899003)(13003099007);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?ZdumSl8yOgss3tNBGlhs8YyWSjUFO1FebFQ36eJhFYdPsuAusOOw0bimOC?= =?iso-8859-1?Q?YBqF4UFe6dDu/MopzD2HRDPCbjEygOcfY5teYMJ73wvp1+13YdWvwFken0?= =?iso-8859-1?Q?IUq9JZy3GkDtZxY7zn0lN3r1FfQ2/n1TCIlQWa2Hm7GUp2HNCCgNerPh+q?= =?iso-8859-1?Q?NSl1cUxDach5+hRk7/so2kKl3uUjBxhY28ULxR/u3R7QOV7DrPUOU0c7kS?= =?iso-8859-1?Q?O+JEdw+Ofb6ppbGcG6Hsb/iPVqDA9+9LnPz6nehvglftrZmI3qIU/zoWDq?= =?iso-8859-1?Q?wR5+x1gvDFDwAt3CrxvKEBOAvx6uBuXVPFSDddDAxgYjgUIME/71PgTi/L?= =?iso-8859-1?Q?jmhgSOa7LiV8KJGHTyzejtvQa3LIqGPqVMNudEkCqwjp5mSVFsX+weevfd?= =?iso-8859-1?Q?xCWB/kQ0KN4BCkAy4uHCP+qZarIYL3sfwfZd65NCWOEYekJSb9Ii5RllNL?= =?iso-8859-1?Q?c1BInDZlH7AD9mtqLBWGC351jdplqaCYIiFvSJ7gGXloZb08v8rfCHqLIM?= =?iso-8859-1?Q?k6m0QpMRUA21lr8vb6l0Ix/uh7ZOsKohhSABaMNyW/VjwDbf8C0/K3CFsY?= =?iso-8859-1?Q?NQPIsBFufUyDkWyoYGkgwnwXgXJRQnSpdpkRt4CY3eZBElO/dfeQmv+H02?= =?iso-8859-1?Q?NbjIwQtCINFO/VHk5DtZiwxYnREQ6tio+KAjwEbIPxCHH+BsVLd6/SM62b?= =?iso-8859-1?Q?BJVBvRFDMw7oZQ+1jLBzh1BOHRAkGn/AFpxYXS+07sSNEdaudQ4tqa7v3y?= =?iso-8859-1?Q?9ZIp40gw4ZMAMWMEJnTroUhuhh2mwNo2xmkc2LnM3GX8uxXuu+bCMRDJmt?= =?iso-8859-1?Q?wabm0WzBFIvAxeLnlC0cYblsN2vldqVP14fwmGBn1upVFkliD4B6YKEmhk?= =?iso-8859-1?Q?NedA3ZdFhHXUOw0LLcjjMq1kUR4BywWLLdg0NsOSKGfbDdzLInGJ0QY+Wq?= =?iso-8859-1?Q?kkqoaQ0nr2DGRCQgv2hiPQsVHnDJmI56rd+CKgpMcs4iAUH3kFuxmQkbKP?= =?iso-8859-1?Q?ntQ7ofKX8x14u6rxBmL0YXZrU+ggTB1V3iVQQiWwAyWNGYsIbOPfIQk3aP?= =?iso-8859-1?Q?MGPTf2+rhCSAKt5dsqNYVV9cmLm2ywfX0bp954tpI4EsPe3wxEJ/zsw7Kx?= =?iso-8859-1?Q?CyIOOMFOeRkphtm1YaCoRvExGzZ+06ohGGBo1VgRIbkB+Xyh5xD9dQSqpr?= =?iso-8859-1?Q?4BVCs2UvkdmZIIMDXrlLTINRTXV6OrZfI5LrkUNtHzSObCv5OaFkDkx0xh?= =?iso-8859-1?Q?r854PcIvKnPRPJNBmPX1ywfSLtTu0sr1rWMTnY7JpgKVSPZ7ggUGHHNjvy?= =?iso-8859-1?Q?dE17k5arjK8psXSMIN8ve9k5bbyQthm/4XodaM8KkxwhqS4LBAe9rf7Qpm?= =?iso-8859-1?Q?qAePDXxO+C5EFQnJkeGC6Dlynhw1ceoX8LwrK6FENJ32Aa3hXVbqE1/psZ?= =?iso-8859-1?Q?GdK12DuqwMq+uHIHSjMuwYesSF3XfcnwAmMG1KqiKZFTGAjcgB0ESrLgLz?= =?iso-8859-1?Q?uorIf0xrlBCq3Gv+DoD13cWddE4GaJO8XzAu8vWfkPL9qAElhqe0pV8rs6?= =?iso-8859-1?Q?eTas/gYmcf0mYHtZ+G9E0d9XUb1QyMpj+lVnL65V4Yz6X34z91QwvuXUrk?= =?iso-8859-1?Q?4eGX7qyH53qPNAUgHPRWcmgel5aF6Mi46hOy6dZUFIlDhD72NlZyJQf13i?= =?iso-8859-1?Q?UBuhJ4Ep1j6OnjNl5bwMrTbyAaGvM+Z5B8WMN0tLvyR3AH0TXO1dRwHXw+?= =?iso-8859-1?Q?k6LoS9wbKNyqEMzJj+CtU6m1nntifvBisZ8sIbEFgJdYe9?= Content-Type: multipart/alternative; boundary="_000_PH7PR17MB7026DBC8EB5266EB9F94F3EFC0A92PH7PR17MB7026namp_" MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: kCQv3/Egdj/4Aqyls+MGcwk3vf516HqhIhzgEvht/1sg0HeWxV+mhXrQ3xv1PA203uTYws87pLwrHxPQqavgV2ZlkWLPxfJDrsXtbg+sdTpJmQ7nY4afqiCol9+i8LQLSQa2RTbe2vLJuSykThlDpm5A76IUmAE5zFUfSA6SQqDkyZiJefNwX38yu+GzgH6Zedzkcc+zarssvDWZOokm8pCSvIEISClHC6uTmWflbEtfBGyrEu9OS/cfwRPXqBMSa7nPVSGJC6pslhK8iG5kh+N3yI2VBu63U2WvGXKGRpMgOBCKntfbUKVml67P5b1o3W9HNgNBuFJ4oXIyDr+UdQ== X-OriginatorOrg: epic.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PH7PR17MB7026.namprd17.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: bbd86786-4ea1-4fa5-4faa-08df07a4a922 X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Aug 2026 21:13:10.2951 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: d8d598e0-2fb2-4605-8514-1967b50e2bd6 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fZLb92smGKOsOdolejEBdMFqPwSagVrmOISJ4RWdIKQ4dPmbc5NFNCu+He/J/RFGIoykGISeVe+oYzoSng8OSQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR17MB6496 X-Proofpoint-Spam-Info: AW1haW4tMjYwODMxMDE4MyBTYWx0ZWRfX9Sv45YQu6ppq FfkybLOijxutbjYpq+NcIpbHKAlOmjjuk1gGbgihctOUtOfmfrMt7vne3xi/zTw7/ds67yYcfg/ IPEk7RE5KGRnMdSBqdF7F//i9vvoggs= X-Proofpoint-ORIG-GUID: IeKr3EHtAx4wYfebnjZDTCi8bpqV3Tgj X-Proofpoint-GUID: IeKr3EHtAx4wYfebnjZDTCi8bpqV3Tgj X-Authority-Analysis: v=2.4 cv=DMK/JSNb c=1 sm=1 tr=0 ts=6a95ee68 cx=c_pps a=w14INr65hnrDDPfMN4rXVw==:117 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=Sv0fKeRqtYgA:10 a=fLxXaBswY2kA:10 a=VkNPw1HP01LnGYTKEx00:22 a=HcFE1RN0hNOP7eReKWeE:22 a=gFmlLKb4Aa07gUbaYQt1:22 a=mLnsDVdbAAAA:8 a=nqngphQYAAAA:8 a=cWRNjhkoAAAA:8 a=tHz9FfFoAAAA:8 a=KiA8O_NwAAAA:8 a=cStgfdTvbnsH6mzfKCYA:9 a=lqcHg5cX4UMA:10 a=wPNLvfGTeEIA:10 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=LwHoF-TZM-5o7Qfgk60A:9 a=nFKeOWIhgq_6a2wP:21 a=gKO2Hq4RSVkA:10 a=UiCQ7L4-1S4A:10 a=hTZeC7Yk6K0A:10 a=frz4AuCg-hUA:10 a=xnp1pY6zelCj5OLna2To:22 a=l3Kf0c7r5vjhVLBHvrpp:22 a=sVa6W5Aao32NNC1mekxh:22 a=E2LB0w4p2F9oaE3r9NTf:22 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwODMxMDE4MyBTYWx0ZWRfXw4qK+WTuTMY0 eYStw+UlKDr3a/znaHtX1BCNkzJUuOQ/dv2Bea3xWccO8g96jLNjIv7hlYDxj7Pcc0WUNJB2LHM ZnJqbaHvuDhdLtHsRf2x8Kb+QcY8+kepC0Z/RNrqbXouIVlnzgGM+m97ED41/Ctbwih+IGHwf9v xSGMgdfqXVtyVjwqMgn15TbIM6LdzTtp+IgmrhFHYzL2xbn5xfqZEgyu0/x4vscfiZubiH9Ns9h rogUeCErJAsCAfionIL7e0Fw+m1mQipWd7IymbVyBX3/fEkKRi9nam9DbFgj1sjTE1Y3qxRXapx GLlXJqBFwsHHOKYG5jL13+OQ0OBetc+lkl1A7Ei5B0wCmTcCOWJiSEcu8n9xIWxAvjLCTaWLj+k yqTHPl8BE4PEL2FwwYDUj6LvocSHAxdL93A9E68eYK7g5AK40xS5S5ic8m3dGKx90sB3oLOl5Uh PQ9tTufb6rD73O8qGbg== X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 clxscore=1011 impostorscore=0 malwarescore=0 priorityscore=1501 suspectscore=0 bulkscore=0 phishscore=0 adultscore=0 lowpriorityscore=0 spamscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2606150000 definitions=main-2608310183 X-purgate-ID: tlsNG-42698a/1788210797-A88C99EA-1767DA3B/0/0 X-purgate-type: clean X-purgate-size: 18127 --_000_PH7PR17MB7026DBC8EB5266EB9F94F3EFC0A92PH7PR17MB7026namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable @Andrew Cooper - Checking back in on this thread - a= pologies if it continued elsewhere. --Jake From: Darryl Voss Sent: Tuesday, July 14, 2026 8:10 AM To: Andrew Cooper ; Jake Vondra ; predisc= losure-applications@lists.xenproject.org Cc: alex.brett@citrix.com Subject: Re: Epic Hosting - Xen Pre-Disclosure Submission Hi Andrew- We're a hosting provider, so we generally don't publicize the infrastructur= e platforms we use for our customers. Because of that, we don't have much p= ublicly available evidence of our status as a XenServer user. I can provide our current XenServer host count if that would satisfy the re= quest, but I'm not sure what additional evidence I could offer. I also beli= eve you were directly involved with the AMD Turin microcode issue about a y= ear ago. We wouldn't have been pushing for that microcode update if we were= n't heavily using XenServer. Would that be sufficient to qualify as evidenc= e? Darryl ________________________________ From: Andrew Cooper > Sent: Friday, July 10, 2026 3:14 PM To: Jake Vondra >; predisclosure-= applications@lists.xenproject.org > Cc: Darryl Voss >; alex.brett@citri= x.com > Subject: Re: Epic Hosting - Xen Pre-Disclosure Submission External Mail. Careful of links / attachments. Submit Helpdesk if unsure. On 28/05/2026 6:00 pm, Jake Vondra wrote: I am writing to request an addition to the Pre-Disclosure program - my resp= onses to the requested prompts are in bold below. * The name of your organization: Epic Hosting LLC * Domain name(s) which you use to provide Xen software/services: epicho= sted.com * A brief description of why you fit the criteria: we are a large scale= enterprise delivering our integrated healthcare software * If not all of your products/services use Xen, a list of (some of) you= r products/services (or categories thereof) which do: we largely deliver th= e application presentation layer via XenServer * Link(s) to current public web pages, belonging to your organisation, = for each of following pieces of information: * Evidence of your status as a service/software provider: https://ww= w.epic.com/ * If you are a public hosting provider, your public rates or how to = get a quote: NA * If you are a software provider, how your software can be downloade= d or purchased: https://www.epic.com/contact/ * If you are an open-source project, a mailing list archive and/or vers= ion control repository, with active development: NA * Evidence of your status as a user/distributor of Xen: NA * Statements about, or descriptions of, your eligible production ser= vices or released software, from which it is immediately evident that they = use Xen. * Information about your handling of security problems: https://www.epi= c.com/epic/page/reporting-potential-security-vulnerability/ * Your invitation to members of the public, who discover security pr= oblems with your products/services, to report them in confidence to you; * Specifically, the contact information (email addresses or other co= ntact instructions) which such a member of the public should use. * A statement to the effect that you have read this policy and agree to= abide by the terms for inclusion in the list, specifically the requirement= s to regarding confidentiality during an embargo period: Acknowledged - thi= s has been reviewed * The single (non-personal) email alias you wish added to the predisclo= sure list: XenServer-Notices@epic.com Hello, Thankyou for your application and sorry for the delay. Most looks to be in order, but NA really isn't ok for your evidence as a us= er of Xen. Is there nothing you can point to? Not even a statement of whi= ch platforms are supported by EPIC? Regards, Andrew --_000_PH7PR17MB7026DBC8EB5266EB9F94F3EFC0A92PH7PR17MB7026namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

@Andrew Cooper - Checking back in = on this thread – apologies if it continued elsewhere.

 

--J= ake

 

From: Darryl Voss <Darryl@epic.co= m>
Sent: Tuesday, July 14, 2026 8:10 AM
To: Andrew Cooper <andrew@xen.org>; Jake Vondra <jvondra@ep= ic.com>; predisclosure-applications@lists.xenproject.org
Cc: alex.brett@citrix.com
Subject: Re: Epic Hosting - Xen Pre-Disclosure Submission=

 

Hi Andr= ew-

We̵= 7;re a hosting provider, so we generally don’t publicize the infrastr= ucture platforms we use for our customers. Because of that, we don’t = have much publicly available evidence of our status as a XenServer user.

I can p= rovide our current XenServer host count if that would satisfy the request, = but I’m not sure what additional evidence I could offer. I also belie= ve you were directly involved with the AMD Turin microcode issue about a year ago. We wouldn’t have been pushin= g for that microcode update if we weren’t heavily using XenServer. Wo= uld that be sufficient to qualify as evidence?

Darryl<= o:p>

 

 

From: Andrew Cooper <andrew@xen.org>
Sent: Friday, July 10, 2026 3:14 PM
To: Jake Vondra <jvondra= @epic.com>; predisclosure-applications@lists.xenproject.org <predisclosure-applications@= lists.xenproject.org>
Cc: Darryl Voss <Darryl@e= pic.com>; alex.brett@citrix.com <alex= .brett@citrix.com>
Subject: Re: Epic Hosting - Xen Pre-Disclosure Submission =

 

Externa= l Mail. Careful of links / attachments. Submit Helpdesk if unsure.

 

On 28/05/2026 6:00 pm, Jake Vondra wrote:=

I am writing to request an addition to the Pre-Disclosure program –= ; my responses to the requested prompts are in bold below.

 

  • The name of your = organization: Epic Hosting LLC
  • Domain name(s) which you use to provide Xen software/= services: epichosted.com
  • A brief description of why you fit the criteria: we are a large scale enterprise delivering our integrated healthcare sof= tware
  • If not all of your products/services use Xen, a list of (some of) y= our products/services (or categories thereof) which do: we largely deliver the application presentation layer via XenServer<= o:p>
  • Li= nk(s) to current public web pages, belonging to your organisation, for each= of following pieces of information:
    • Evidence of your = status as a service/software provider: https://www.epic.com/
    • If you are = a public hosting provider, your public rates or how to get a quote: NA
    • If you are a software provider, how your software can be downloaded= or purchased: = https://www.epic.com/contact/<= /span>
  • If you are an ope= n-source project, a mailing list archive and/or version control repository,= with active development: NA
  • Evidence of your status as a user/distributor of Xen: NA
    • Statements about,= or descriptions of, your eligible production services or released software= , from which it is immediately evident that they use Xen.
      • Your invitation t= o members of the public, who discover security problems with your products/= services, to report them in confidence to you;
      • Specifically, the contact info= rmation (email addresses or other contact instructions) which such a member= of the public should use.
    • A statement to th= e effect that you have read this policy and agree to abide by the terms for= inclusion in the list, specifically the requirements to regarding confiden= tiality during an embargo period: Acknowledged – this has been reviewed
    • The single (non-personal) = email alias you wish added to the predisclosure list: XenServer-Notices@epic.com=


Hello,  Thankyou for your application and sorry for the delay.

Most looks to be in order, but NA really isn't ok for your evidence as a us= er of Xen.  Is there nothing you can point to?  Not even a statem= ent of which platforms are supported by EPIC?

Regards,

Andrew

--_000_PH7PR17MB7026DBC8EB5266EB9F94F3EFC0A92PH7PR17MB7026namp_--