Simple Ansible playbook to update bash and test for Shellshock vulnerability on yum-based boxes

yumUpdateBashAndTestShellshock.yml

---
- hosts: [ 'all', '{{cli_target}}' ]

  tasks:
    - name: clean yum
      command: yum clean all
      tags: cleanyum

    - name: update bash
      yum: name=bash state=latest
      tags: updatebash

    - name: test vulnerability
      shell: env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
      register: vuln
      failed_when: vuln.stdout.find('vulnerable') != -1
      changed_when: false
      tags: testvuln