A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.

Source