If you create a directory with a space in it and then try to run a program by double clicking it, it fails. e.g. create "foo bar" and put foo.sh in it and try to run it you'll see: xterm: Can't execvp /home/huggie/foo: No such file or directory Indeed this is a security bug as if /home/huggie/foo *does* exist then it will be executed. Looks like bad quoting to me.
Oh sorry, this is http://bugs.debian.org/256623
Bug not present in 4.1 branch
Upgrade to 4.1.4, or remember that Joe Klemmer said that spaces in paths are a "bad thing".
Actually, I should read the bug report more carefully. There is also a problem in 4.1, which will be fixed (today, I hope)
Now it is fixed in CVS HEAD. I have no idea whether the bug is present or not in 4.0.x.
huggie says it's present in 4.0.x and asked me to reopen it
With improvements to xfdesktop and xfsession-manager, there seems to be little holding back alpha-4.2, so 4.0.7 might never be released. So for the time being, a 4.0.x fix is on hold.
fix uploaded to 4_0.x branch. It should work. Please verify.