Rough example of openssl vuln patch

openssl

---
 - name: Patching Heartbleed
   hosts: "{{ hosts }}"
   sudo: yes
   tasks:
     - name: Detect if Vulnerable
       command: openssl -b
       register: results
       ignore_errors: yes



     - name: Patching APT based packages
       apt: upgrade={{ item }} update_cache=yes
       when: ansible_os_family == "Debian" and results.stdout contains "build date SOMEDATE"
       notify: Restart Host
       with_items:
         - libssl
         - etc


   handlers:
      - name:  Restart Host
        command: /sbin/reboot