Thanks for the feedback folks. I upgraded using the installation media and it worked like a charm but, I suspect this machine was fated to EOL. As soon as we got the machine back up the raid volume corrupted. I'll take a look as suggested about how busybox is related to the xapi. The vulnerability scanners are screaming about the cve's associated with the the package so we've been removing the package from other machines it's not required on. This was simply an administrative faux pas on our part for sure. We've been very happy with xcp-ng and still consider it a rock solid solution.
Thanks again for responding!