VERSION                | 2 +-
 doc/devel/release.html | 7 +++++++
 src/crypto/dsa/dsa.go  | 3 +++

diff --git a/VERSION b/VERSION
index 40bdee30b1698c84a8f59c4b1a68fee0a87eacf8..524722cb7a4777f3f2875e7a828165686482e2eb 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-go1.12.10
\ No newline at end of file
+go1.12.11
\ No newline at end of file
diff --git a/doc/devel/release.html b/doc/devel/release.html
index 1634fbe170c7a796fb268631e8377d63d3f687d2..c756cfeb4f5928115c007a021bc616c178ecfb5d 100644
--- a/doc/devel/release.html
+++ b/doc/devel/release.html
@@ -105,6 +105,13 @@ See the <a href="https://github.com/golang/go/issues?q=milestone%3AGo1.12.10">Go
 1.12.10 milestone</a> on our issue tracker for details.
 </p>
 
+<p>
+go1.12.11 (released 2019/10/17) includes security fixes to the
+<code>crypto/dsa</code> package.
+See the <a href="https://github.com/golang/go/issues?q=milestone%3AGo1.12.11">Go
+1.12.11 milestone</a> on our issue tracker for details.
+</p>
+
 <h2 id="go1.11">go1.11 (released 2018/08/24)</h2>
 
 <p>
diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
index 575314b1b468908c3bb197ac656e368cb1f5e701..2fc4f1f05bfb09483e60882ff79bb5fd738f7c21 100644
--- a/src/crypto/dsa/dsa.go
+++ b/src/crypto/dsa/dsa.go
@@ -279,6 +279,9 @@ 		return false
 	}
 
 	w := new(big.Int).ModInverse(s, pub.Q)
+	if w == nil {
+		return false
+	}
 
 	n := pub.Q.BitLen()
 	if n&7 != 0 {