Hi, The TEMP IDs are automatically generated by the security tracker and are a placeholder for the CVE ID.
They are unique but generally should not be quoted outside the tracker. The issue should (but not always) get a real CVE ID so yes it can change to that. If you were looking for a fixed reference the bug number is probably a better option. - Craig
