VMware has acknowledge  VMware vSphere Data Protection product update addresses a critical information disclosure vulnerability. Issue was identified by Jakub Mleczko.

Click for detail 

VMware Security consideration of disabling the Transparent Page Sharing

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2080735

Its not a big risk but point to consider. VMware will disable TPS by default in upcoming release.

Click to know more about TPS

http://blogs.vmware.com/security/2014/09/vmware-investigating-bash-command-injection-vulnerability-aka-shell-shock-cve-2014-6271-cve-2014-7169.html