[1.4.X] Fixed #10936 - Tempered recommendation of SQLite - thanks Karen Tracey for the feedback.

Backport of 9190d89829 from master
[1.4.X] Fixed #18548 - Clarified note regarding reusing model instances when form validation fails.

Backport of fd02bcff4a from master
[1.4.x] Fixed a couple links that didn't backport cleanly
[1.4.X] Fixed #18473 - Fixed a suggestion that GZipMiddleware needs to be first in the list of middleware.

Backport of 3e0857041b from master
Fixed a security issue related to password resets

Full disclosure and new release are forthcoming

backport from master
Fixed an error in the set cookie documentation
[1.4.x] Bump version numbers for security release.
[1.4.x] Bump ALL the version numbers.
Added missed poisoned host header test changes
[1.4.X] Fixed #18046 - Documented that an index is created by default for ForeignKeys; thanks jbauer for the suggestion.

Backport of db598dd8a0 from master
[1.4.X] Fixed #17388 - Noted in the custom model field docs that field methods need to handle None if the field may be null.

Backport of 4cef9a09f9 from master
[1.4.X] Fixed #17006 - Documented ModelAdmin get_form() and get_formsets()

Backport of eed4faf16f from master
[1.4.x] Fixed arguments for get_inline_instances; refs #17006.
[1.4.X] Fixed #13869 - Warned that QuerySet.iterator() doesn't affect DB driver caching; thanks jtiai for the suggestion.

Backport of 2f722d9728 from master
Added 1.4.2 release notes
[1.4.x] Fix an HTML-parser test that's failed in Python 2.6.8 since 5c79dd58.

The problem description in #18239 asserted that
http://bugs.python.org/issue670664 was fixed in Python 2.6.8, but based on
http://bugs.python.org/issue670664#msg146770 it appears that's not correct; the
fix was only applied in 2.7, 3.2, and Python trunk. Therefore we must use our
patched HTMLParser subclass in all Python 2.6 versions.

Backport of fcec904e4f from master. Fixes #19148.
[1.4.X] Fixed #9471 - Expanded ModelAdmin.raw_id_fields docs; thanks adroffne for the suggestion.

Backport of da958eb209 from master
[1.4.x] Fixed #18823 -- Ensured m2m.clear() works when using through+to_field

There was a potential data-loss issue involved -- when clearing
instance's m2m assignments it was possible some other instance's
m2m data was deleted instead.

This commit also improved None handling for to_field cases.

Backpatch of 611c4d6f1c24763e5e6e331a5dcf9b610288aaa8
[1.4.x] Fixed #19172 -- Isolated poisoned_http_host tests from 500 handlers

Thanks bernardofontes for the report.

Backport of b774c5993 from master.
[1.4.x] Fixed #19208 -- Docs for mod_wsgi daemon mode

Thanks Graham Dumpleton for the patch.

Backport of bc00075 from master.