Oracle Client Custom Install w/o Java
Hi Oracle Community,
The Security scan at Customer's site found a vulnerability in Java component of Oracle Client. The Application Product does not use Oracle Client's Java component. Thus we are asked to perform a Custom Client Install without Java and few other unnecessary components.
Following are the values we set in Client Install Response file.
oracle.install.client.installType=Custom
oracle.install.client.customComponents="oracle.rdbms.util:19.0.0.0.0","oracle.sqlplus:19.0.0.0.0","oracle.rdbms.oci:19.0.0.0.0","oracle.network.client:19.0.0.0.0","oracle.network.listener:19.0.0.0.0"
Installation goes successful. However surprisingly, we still see “ojdbc.jar” under the “jdbc/jdk” folder in “ORACLE_HOME”
Also, the oracle jdk gets installed.