[release-branch.go1.13] all: merge release-branch.go1.13-security into release-branch.go1.13

Change-Id: I4fea3f155e7f7315a536e7b670d7ceba2092555d

3 files changed, 18 insertions, 1 deletions

diff --git a/VERSION b/VERSION
index 10dfea1f94..7ff451f4df 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-go1.13.1
\ No newline at end of file
+go1.13.2
\ No newline at end of file
diff --git a/doc/devel/release.html b/doc/devel/release.html
index f83e676ff4..fc858d418b 100644
--- a/doc/devel/release.html
+++ b/doc/devel/release.html
@@ -39,6 +39,13 @@ See the <a href="https://github.com/golang/go/issues?q=milestone%3AGo1.13.1">Go
 1.13.1 milestone</a> on our issue tracker for details.
 </p>
 
+<p>
+go1.13.2 (released 2019/10/17) includes security fixes to the
+<code>crypto/dsa</code> package and the compiler.
+See the <a href="https://github.com/golang/go/issues?q=milestone%3AGo1.13.2">Go
+1.13.2 milestone</a> on our issue tracker for details.
+</p>
+
 <h2 id="go1.12">go1.12 (released 2019/02/25)</h2>
 
 <p>
@@ -121,6 +128,13 @@ See the <a href="https://github.com/golang/go/issues?q=milestone%3AGo1.12.10">Go
 1.12.10 milestone</a> on our issue tracker for details.
 </p>
 
+<p>
+go1.12.11 (released 2019/10/17) includes security fixes to the
+<code>crypto/dsa</code> package.
+See the <a href="https://github.com/golang/go/issues?q=milestone%3AGo1.12.11">Go
+1.12.11 milestone</a> on our issue tracker for details.
+</p>
+
 <h2 id="go1.11">go1.11 (released 2018/08/24)</h2>
 
 <p>
diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
index 575314b1b4..2fc4f1f05b 100644
--- a/src/crypto/dsa/dsa.go
+++ b/src/crypto/dsa/dsa.go
@@ -279,6 +279,9 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
 	}
 
 	w := new(big.Int).ModInverse(s, pub.Q)
+	if w == nil {
+		return false
+	}
 
 	n := pub.Q.BitLen()
 	if n&7 != 0 {