Quick Ansible check for Shellshock

gistfile1.txt

---
- hosts: all
  gather_facts: no
  tasks:
    - name: Check for Shellshock vulnerability
      command: env x='() { :;}; echo vulnerable' bash -c "echo ok"
      register: result

    - name: Skip if not vulnerable
      debug: msg="This host is vulnerable, patch bash"
      when: '"vulnerable" in result.stdout'