An infrastructure as a Service cloud provider provides both single tenant and multi-tenant virtual machine based cloud offerings using the Xen hypervisor. A zero- day vulnerability is found with Xen and is being reported and managed by the closed community established by Xen for managing these types of situations. The cloud provider is a member of this closed community. What is the communication flow between cloud provider and customer throughout the management and resolution of this issue?