[notify] mercurial: update to 3.2.3, fixes CVE-2014-9390