Hi,
The TEMP IDs are automatically generated by the security tracker and are a placeholder for the CVE ID.
They are unique but generally should not be quoted outside the tracker. The issue should (but not always) get a real CVE ID so yes it can change to that.
If you were looking for a fixed reference the bug number is probably a better option.
- Craig