VERSION | 2 +- doc/devel/release.html | 14 ++++++++++++++ src/crypto/dsa/dsa.go | 3 +++ diff --git a/VERSION b/VERSION index 10dfea1f9408faaf2277be599d2c0a7e9c583625..7ff451f4dfc1d124c5ed38e153144099f94047f2 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -go1.13.1 \ No newline at end of file +go1.13.2 \ No newline at end of file diff --git a/doc/devel/release.html b/doc/devel/release.html index f83e676ff47f8882b014b07dd7ab8fb07cf580da..fc858d418b080b743c5e1566671c8991c0d8ec6b 100644 --- a/doc/devel/release.html +++ b/doc/devel/release.html @@ -39,6 +39,13 @@ See the Go 1.13.1 milestone on our issue tracker for details.

+

+go1.13.2 (released 2019/10/17) includes security fixes to the +crypto/dsa package and the compiler. +See the Go +1.13.2 milestone on our issue tracker for details. +

+

go1.12 (released 2019/02/25)

@@ -119,6 +126,13 @@ go1.12.10 (released 2019/09/25) includes security fixes to the net/http and net/textproto packages. See the Go 1.12.10 milestone on our issue tracker for details. +

+ +

+go1.12.11 (released 2019/10/17) includes security fixes to the +crypto/dsa package. +See the Go +1.12.11 milestone on our issue tracker for details.

go1.11 (released 2018/08/24)

diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go index 575314b1b468908c3bb197ac656e368cb1f5e701..2fc4f1f05bfb09483e60882ff79bb5fd738f7c21 100644 --- a/src/crypto/dsa/dsa.go +++ b/src/crypto/dsa/dsa.go @@ -279,6 +279,9 @@ return false } w := new(big.Int).ModInverse(s, pub.Q) + if w == nil { + return false + } n := pub.Q.BitLen() if n&7 != 0 {