How to automate patching web server vulnerabilities with Ansible

Question

I manage multiple web servers and want to automate patching security vulnerabilities using Ansible. My questions are:

• How to create an Ansible playbook for automated updates.
• How to handle package version control and rollback strategies.
• How to integrate Ansible with vulnerability scanners for automated remediation.

A sample Ansible script for patching Apache/Nginx servers would be helpful.