Mozilla Firefox 58.0.1: fix for Windows page-load issue
Mozilla will release Firefox 58.0.1 in the coming 24-hour period to address a critical issue on Windows machines that causes page load failures in the browser and a critical security issue.
The update is
not out yet at the time of writing but it will soon be released via the web browser's automatic update functionality. You can run manual checks for updates in Firefox by clicking on the menu icon and selecting Help > About Firefox from the menu that opens.
Users who prefer to download new versions instead can do so on the Mozilla website after the release as well.
Mozilla Firefox 58.0.1
The preliminary release notes list one issue as fixed in Firefox 58.0.1.
When using certain non-default security policies on Windows (for example with Windows Defender Exploit Protection or Webroot security products), Firefox 58.0 would fail to load pages.
Bug 1433065, Firefox 58 is not loading any pages (including about: pages), is the main tracking bug for the issue. The user who opened the bug on Bugzilla describes the issue as Firefox not loading any web pages, including local ones, and showing a white background instead.
He reported that certain exploit mitigation settings would cause pages to not display correctly in Firefox. Validate Stack Integrity (StackPivot), Validate API Invocation (Caller Check), Simulate Execution (SimExec), and Import Address Filtering (IAF) caused the white page issue in Firefox while Export Address Filtering (EAF) crashed the browser instead.
The number of users affected by the issue is unclear but it appears to be large enough to warrant a bug fix release.
A security issue is patched in Firefox 58.0.1 as well. It addresses a critical issue in which unsanitized output in the browser user interface could lead to arbitrary code execution.
Firefox 58.0.1 has two unresolved issues which affect Firefox 58.0 as well:
- Users running Firefox for Windows over a Remote Desktop Connection (RDP) may find that audio playback is disabled due to increased security restrictions.
- Users running certain screen readers may experience performance issues and are advised to use Firefox ESR until performance issues are resolved in an upcoming future release.
We will update the article shortly after the official release of Firefox 58.0.1 to link directly to the download and official release notes.
Now You: are you affected by the issue?
Those with insecurity tend to have too much “security” software. Just sayin’ …
Can somebody help me to understand why video playback on YouTube is now awful on Firefox 58.0 and 58.0.1? i know i have an older laptop but video playback in now slightly worse than Firefox 56.0.2. When Firefox 57 Quantum was released i could play 1080p videos no problem and 720p60 no problem, and could even do other things in other tabs or load other videos and the video playback would not suffer. Now with Firefox 58 i can’t play videos in 1080p, 720p60 and i can barely play videos in 720p now as when i just hover over the video the video stops for like 5 to 10 seconds while the audio still plays.
How can this be such a night and day difference between Firefox 57 and Firefox 58? i did searches on this and can find nothing.
Will this get better Firefox 59 ?
Can i do something in about:config to help this ?
Can i install Firefox 57.0.4 right over my Firefox 58.0.1 install or do i have to uninstall everything than install Firefox 57.0.4 ?
Please somebody help me, Please !
Rick, you cannot go back as Firefox 58 user profiles are not compatible with earlier versions of Firefox according to Mozilla. You could create a new profile (start Firefox with -p parameter) and use it with an earlier version or Firefox 58.x to find out if it is profile related.
@ Rick other than Martin solution, you can use portable version of Firefox 57.0.4 or any version in which YouTube works fine for you.
Rick, you could open a new profile and check that out.
Maybe an extension interference? Have you modified about:config settings? A new profile may not resolve the issue but if the issues persist you’ll know that they occur even on a clean profile.
@Rick A. Go to YouTube, start video playback, right click on video and select Stats. Check Codec more precisely. On FireFox it should give you h264/avc1: [https://i.imgur.com/tnXYOBM.png]
If YouTube gives you VP9 that may be the problem. I can’t tell exactly in which conditions YouTube serves h264 and when VP9. Here I get h264 with Fx (all ESR, Stable and Nightly) and VP9 with Chromium.
You can try a private window, and if that solves your problem (YT starts serving h264 again) then clear all cookies for YouTube. If it doesn’t you can try this extension:
It’s a Google thing, VP9 consumes less bandwidth, but it’s not hardware accelerated on many platforms. I assume they want to push this to everyone eventually.
@Yuliya – i actually already have that extension installed, although it’s disabled as an extension called Magic Actions has an option that does the same thing, but that extension on Firefox is basically abandoned, so i might go back to H264ify sometime.
i actually don’t notice a big difference on this laptop between VP9 and VP9 disabled, but on my older laptop i notice a bigger difference.
But thanks again for you reply, i might’ve not of known of H264ify and you would’ve let me know about it.
“but itâ€™s not hardware accelerated on many platforms.” – That i did not know about. i might search up on that for more. Thanks again.
@Yuliya – i forgot to mention, Firefox 58.0.1 fixed it. in case you set “Replies to your comments only” like me. You wouldn’t see that i replied to my original comment with the explanation.
I don’t know about everyone else but the vast majority of YouTube videos I see in FF v56, v58, Waterfox v56 and Nightly are using the vp9 codec, by default, and I always see zero dropped frames (desktop) when playing 1080p 60fps video. But, my desktop has discrete graphics, and my old laptop also has a graphics card but 720p 60fps video is a much better choice performance wise and I mostly see vp9 on there also. I don’t know if it matters but I’m using the old YouTube layout.
Lots of potential problem areas: codecs, cookies, changes in about:config and hardware. I do know that “dom.enable_resource_timing” will cause Pale Moon to not play YouTube videos on my computers but it doesn’t cause a problem in FF, for me.
You can try an extension to force h264 when it’s available on that video. Yuliya mentioned one and another is Magic Actions for YouTube which is a WebExt that I use in Chromium and FF based browsers and it has the h264 option also, I don’t use the h264 option so I can’t say how often it will get used.
Any improvement when starting in Safe Mode?
You can create a new profile to see if the problem is in the current one. This video does a good job of explaining the process, the guy in the video has a newer version of the video but it uses 1080p 60fps by default on my computer, the directions in this older video will work. “https://www.youtube.com/watch?v=zgj1o_zn29Q”
You can ‘Refresh’ Firefox in the about:support page which will remove your addons, customizations and about:config changes. I would save a copy of your profile folder before doing that in case there is no improvement and you want to go back. Theoretically, the refresh should save a copy of the original profile folder to your desktop inside an ‘Old Firefox Data’ folder. The Refresh will rename your profile folder so if you want to go back to the original profile you will have to change the profile.ini file so that it shows the previous name. The profile.ini file is up one level from the profile folders. “https://s14.postimg.org/zfcfpwxpd/Firefox_Profiles.png”
You can even delete the contents of your profile folder except for the places.sqlite (bookmarks) and logins.json (passwords) files to see if the YouTube problem persists and then simply replace the profile folder with your backup after testing. There are multiple options for testing.
I haven’t experienced any freezing, pages not loading, video playback issues or anything else in FF v57+. Because of the big change to v57 I did do a clean install at the time.
Actually the option in Magic Actions for YouTube says it uses the “MP4/AVC” video stream when available. Sorry.
I also haven’t used Any of the Meltdown/Spectre patches, they can cause performance issues too. Have you used any patches?
@Richard Allen – i use Magic Actions as well and that specific MP4/AVC feature also. Too bad Magic Actions is basically abandoned on Firefox. i also use Enhancer For YouTube and YouTube Plus.
Actually, i did not even think about that the culprit could be the Spectre and Meltdown patches. But i let Windows install all the updates and i didn’t have any problems until i updated Firefox to version 58. i have AMD as well and had no blue screen of deaths or anything because of the patches. BUT, Firefox 58 did trigger something, clashed with something or just caused a glitch. i’m just glad 58.0.1 fixed it. You can see my reply to my original comment for the explanation.
Anyway, thank you for your help Richard.
@ Rick A.
Ahh man, I’m seriously bummed. I hadn’t paid attention to the fact that Magic Actions hasn’t been updated since November, in FF. In Chromium browsers it gets updated annoyingly often. I’ll use it as long as I can. If it ever quits working I’ll certainly miss having 5 different player sizes to choose from and I especially like the full-browser size. I’m keeping my fingers crossed.
@Richard Allen – Yeah and Magic Actions on both AMO and Chrome store has been getting bad reviews and the devs reply calling the reviewers “Liars” and “Trolls” and then delete the bad reviews. i’ve had my reviews on AMO deleted as well. So i wrote a longer one that i copied to Notepad that i re-post every one in awhile.
Try it yourself.
Guys, i’m sorry i took so long to respond but the new update, Firefox 58.0.1 fixed it. When i posted my original comment i hadn’t gone on YouTube to watch any videos on the new update as the update had just been released, and there’s nothing in the “What’s New” that says anything about video playback problems. i just figured it was a small update so i didn’t go and test it out before i posted my original comment.
So just a little while ago i got on YouTube and low and behold 720p60 and 1080p are no problem. 58.0.1 fixed it. i even tested 58.0.1 on a Twitch live stream 720p60 and no problem. i haven’t tested live streaming on YouTube yet, as YouTube live streaming was having a quick stutter every few seconds even when i lowered the resolution to 240p. This was happening on Firefox 57 to 58. Hopefully that is gone.
i replied this to my original comment because it will be too much replying to each one of you, so i hope you all can see this, Thank You all for taking the time to reply to help me out. Much appreciated !
Well, the page load fix hasn’t been fixed by this so-called update. For example, this ghacks didn’t load properly after the update, so much for that.
Firefox 58.0 (x64) / Windows 7 (x64) ! not affected by reported page-load issue.
The more Firefox has upgraded, the worse it gets. I got a bug that wasn’t there until today’s update. I couldn’t back out of an xfinity email page. I had to close out the tab.
Like Firefox 58.0.0 before it, Firefox 58.0.1 flagged and blocked as insecure every HTTPS connection I tried to make (unless I deleted my profile’s cert8.db and cert9.db files before every Firefox start and forced Firefox to create new ones). Even though I had disabled Kaspersky’s “Web Anti-Virus” browser extensions and “Web Anti-Virus” protection in Kaspersky itself, it turns out I had to *also* disable scanning of encrypted connections in Kaspersky to put an end to the false-positives. (I also disabled injection of scripts into URLs, which I would have *assumed* would be unnecessary, given that I *thought* I had fully opted out of web protection. Kaspersky Free seemingly doesn’t make it easy to opt out of “web protection.”)
In short, there seems to be an out-of-the-box conflict between Kaspersky Anti-Virus Free and Firefox 58+ — a conflict that’s a bit of a PITA to identify and fix and that doesn’t seem to exist with any other browser I’ve ever used. For what it’s worth, the Root Certificate Checker Martin wrote about a while back flagged my “Kaspersky Anti-Virus Personal Root Certificate” as “interesting,” i.e., not part of the baseline, and worth investigating. Regardless, Firefox is still a pretty major browser, and Kaspersky is still a pretty major anti-virus, so this sort of conflict really shouldn’t happen. I’m *moderately* computer-literate. What if it happened to someone who wasn’t?
Funny – didn’t have “flagged and blocked as insecure every HTTPS connection I tried to make” until after Windows 10 update 1709 installed. Restored to prior to 1709. No more unsecure https.
I’m running Windows 7 SP1 x64, completely up to date (according to Belarc Advisor) on security-only patches via WSUS Offline Update. The only Windows 10 computer I look after runs bulk-licensed, locally administered Sophos anti-virus, which doesn’t seem to have this conflict with Firefox. (The free, cloud-administered home version of Sophos doesn’t seem to have it on the other Windows 7 computers I look after, either.) A somewhat out-of-date Firefox help page (https://support.mozilla.org/en-US/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER) suggests that Avast, Bitdefender, Bullguard, ESET, and Kaspersky have had the same kind of problem with Firefox in the past.
I was suffering from this. fingers crossed its gone now.
So, does this update cause more problems than it solves?
Mozilla Firefox, Portable Edition 58.0.1
This is slightly away from this article…..but has anyone had complete “freezes” of Firefox 57+ ?
I’ve been thinking it might be one of my Extensions, but have yet to go through the tedious trial and error, and long time it would take to prove or disprove that.
Basically, every once in a while……for no apparent reason, FF57+FF58 just hangs, can’t click a thing, move around tabs….nothing.
Just wondering if anyone has had to force FF down, via Task Manager….which I’m guessing, I have to do 2,3 or even 4 times per week. Never had that problem with older Firefox, pre Quantum.
>This is slightly away from this articleâ€¦..but has anyone had complete â€œfreezesâ€ of Firefox 57+ ?
I’ve encountered once only a complete freeze, but then a complete system freeze, while running Firefox 58 (58.0 it was) : no mouse, no keyboard. I attributed this to a system-level freeze I very rarely encounter when exiting from stand-by mode because this had happened already without Firefox running. It’s really very seldom and have no idea of the cause. I’ve added since in the Win7’s registry AdditionalCriticalWorkerThreads and AdditionalDelayedWorkerThreads both set to 4 after having read that Windows sometimes lacks threads to properly wake up …
Hence my experience — apparently — was not caused by Firefox. Apparently only of course.
Thanks for your thoughts.
Just checked……….33 extensions in Firefox 58. This includes Tampermonkey. Now I’m wondering if some CSS running in Tampermonkey could be part of it.
Clearly its just me!! Oh well……. c’est la vie.
I’ve seen in the past that if a script or style wasn’t limited to a specific URL that the result would be interesting. Just an idea.
@Richard – thanks, I do think its worth starting with scripts/Tampermonkey.
Trouble is, trial and error can be a lengthy process…..haha….a bit like Dermatitis, where you’re not sure if its the washing powder or jacuzzi!!
… or the washing powder in the Jacuzzi. ;-)
@A different Martin………..heaven help us no!!!!! ;-)
My problem is different. In Firefox 58, pages load okay, but when I use the proxy option offered in the Startpage search engine, or any other search engine that offers a proxy with search results, I always get a blank page when clicking on results… always! This did not happen pre-Firefox 57 versions. I could not find any possible explanations on the Web concerning this. Does anyone have any idea what might be causing this? Thank you.
i’m using 58.0.1 and visiting google took too long. with chrome it’s instant.
FF 58 created a user_pref(“devtools.onboarding.telemetry.logged”, true); for me. https://github.com/ghacksuserjs/ghacks-user.js/issues/302 that shows that the default should have been false.
What is it and should I reset it to false?
It obviously makes no sense to reset it to false, because whenever FF is started new, it’s “true” again. Dunno why, just watched this behaviour.
58.0.1 (64-bit) is now incredibly slow at loading pages. For example I fire it up, and a selection of my regular sites pops up. I click one and the wait starts. Around a minute later any of the sites may load. Meanwhile I can fire up Chrome and load them instantly. This has occurred since upgrading.
Any ideas ?
This article is a gross downplay of CVE-2018-5124 which is actually greatly more serious than this page load issue.
“A successful exploit could allow the attacker to execute arbitrary code with the privileges of the user. If the user has elevated privileges, the attacker could compromise the system completely,” the advisory states.”
idk why its important for admins to delete real informational comments that the article author should have posted about? Its seriousness goes beyond the load page bug and should not be ignored.
Here is round 2
CVE-2018-2154 Mozilla Firefox HTML Fragments in Chrome-Privileged Documents Arbitrary Code Execution Vulnerability
“The vulnerability is due to insufficient sanitization of HTML fragments in chrome-privileged documents by the affected software. An attacker could exploit the vulnerability by persuading a user to access a link or file that submits malicious input to the affected software. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the user. If the user has elevated privileges, the attacker could compromise the system completely.
Mozilla has confirmed the vulnerability and released software updates.”
No comment deleting happening. Ghacks is run by a single person and I cannot possible moderate comments 24/7. Your comments are live now.
2018 January 30 16:09 GMT
2018 January 31 12:57 GMT
Base 8.8, Temporal 7.7
A vulnerability in Mozilla Firefox could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system.
The vulnerability is due to insufficient sanitization of HTML fragments in chrome-privileged documents by the affected software. An attacker could exploit the vulnerability by persuading a user to access a link or file that submits malicious input to the affected software. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the user. If the user has elevated privileges, the attacker could compromise the system completely.
Mozilla has confirmed the vulnerability and released software updates.
To exploit this vulnerability, the attacker may use misleading language or instructions to persuade a targeted user to open a crafted file.
Firefox for Android and Firefox 52 ESR are not affected by this vulnerability.
Dear me, after checking I saw on the 31st I received the upgrade then the maintenance fix, all was fine until today the 2nd, a few sites no longer shows up due to not been verified, including fb, google and u tube videos will not load, actually now u tube also comes up with the same message – trouble loading page/secure connection failed. Why 2 days later am I having these issues, truly odd.
I still need some help since my post on Jan. 30th.. In Firefox 58.0.1, when I use Startpage’s proxy to view search results, I get blank pages… always. This never happened prior to Firefox 57. I just determined if I enable JS on the proxied page, then it works as expected. HOWEVER, Startpage warns against using scripts on its proxy site.
Anyone, Martin included, have any idea why I’m having this issue in Firefox 57+?
Thank you in advance.
On Firefox 58.0.1 64-bit windows 7 and plenty of RAM. Every time I would access Firefox, within 5 or 10 minutes, I would receive an unresponsive message at the top of the screen and my computer would lock up. I couldn’t even close Firefox, nor could I turn off my computer. I had to unplug it, then plug it back up before I could turn it back on. It did this every time I accessed Firefox. My temporary solution was to turn off Hardware Acceleration and disable ALL add-ons. Afterwards, I’ve had no problems. My next move, is to turn on everything I turned off, one at a time, to see what was causing the problem.
It has become impossible to set Firefox 58.0.1 as the default browser in Windows 10.
It no longer appears in the browser list in App Settings
This happened to me on two different PCs since I updated firefox.
Maybe try doing a full install of Firefox 58.0.1 using a downloaded installer? I don’t use Windows 10 and Firefox isn’t my default browser, but that’s the first thing I would try in your situation.
As shared in my previous post on the 2nd , firefox updated and added a fix on the 31st Jan, 2 days later I had issues and asked if any one knew why.
I am still having issues with firefox but using another browser to gain access to google, facebook.
This is the message I get on fire when I attempt to open google — An error occurred during a connection to http://www.google.com. Peerâ€™s certificate has an invalid signature. Error code: SEC_ERROR_BAD_SIGNATURE.
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
There is no send button to click their offer of sending this error to Modzilla, only can click and tick it.
Today I checked and on the 9th I was given an update 58.0,2 with a maintenance 18.104.22.1681.
I am still having issues with opening google and facebook and u tube, however having a u tube vid on my menu bar I can access u tube using that.
I would like to try uninstall then reinstall but I do not want to loose my important medical bookmarks and others.
There is an option I read when choosing uninstall there is a repair option.
Q Am I correct if I use uninstall I will loose all my bookmarks also
Q Is the fix optional good or could I risk an error upsetting my laptop requiring a tech visit and also loose my bookmarks,
help appreciate thank you
The same problem exists in 58.0.2, so it seems that Mozilla needs some better QA. I used to be able to open firefox on monday and run dozens of tabs all week without issue. Today, if I keep the browser open for more than a few hours, it will hang opening a link in a new tab.