Merge pull request #1590 from edx/cg/shellshock3

Round 3 of shellshock updates

playbooks/roles/security/tasks/security-ubuntu.yml

 #### Bash security vulnerability
 
 - name: Check if we are vulnerable
-  shell: executable=/bin/bash chdir=/tmp env X='() { (a)=>\' bash -c "echo echo check"; [[ "$(cat echo)" == "check" ]] && echo "vulnerable"
+  shell: executable=/bin/bash chdir=/tmp foo='() { echo vulnerable; }' bash -c foo
   register: test_vuln
   ignore_errors: yes
 
@@ -9,11 +9,8 @@
   apt: name=bash state=latest update_cache=true
   when: "'vulnerable' in test_vuln.stdout"
 
-- name: Delete check file
-  file: path=/tmp/echo state=absent
-
 - name: Check again and fail if we are still vulnerable
-  shell: executable=/bin/bash chdir=/tmp env X='() { (a)=>\' bash -c "echo echo check"; [[ "$(cat echo)" == "check" ]] && echo "vulnerable"
+  shell: executable=/bin/bash foo='() { echo vulnerable; }' bash -c foo
   when: "'vulnerable' in test_vuln.stdout"
   register: test_vuln
   failed_when: "'vulnerable' in test_vuln.stdout"