gistfile1.yml

---
- hosts: all
  user: root
  sudo: true

  tasks:
    - name: update apt
      command: apt-get update

    - name: update bash
      command: apt-get --only-upgrade install bash

    - name: check bash fix
      command: env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
      register: command_result
      failed_when: "'error' not in command_result.stderr"