23 Nov 2021

#### Bug fixes

 - Restrict Typha server to FIPS compliant cipher suites. [typha #696](https://github.com/projectcalico/typha/pull/696) (@caseydavenport)
 - Fix log spam from Calico upgrade service for Windows [node #1343](https://github.com/projectcalico/node/pull/1343) (@song-jiang)
 - Increase timeout for setting NetworkUnavailable on shutdown [node #1341](https://github.com/projectcalico/node/pull/1341) (@caseydavenport)
 - Fix potential panic and memory leak in kube-controllers caused by adding and subsequently deleting IPAM blocks [kube-controllers #912](https://github.com/projectcalico/kube-controllers/pull/912) (@caseydavenport)
 - IPAM GC correctly handles multiple IP addresses allocated with the same handle ID. [kube-controllers #903](https://github.com/projectcalico/kube-controllers/pull/903) (@caseydavenport)
 - Fix bug where invalid port structures were being sent to Felix, preventing pods with hostPorts specified from working. [libcalico-go #1545](https://github.com/projectcalico/libcalico-go/pull/1545) (@caseydavenport)
