Peter Avalos added an avalanche of updates for PAM and sh, so I’ll link to a few of them.  The changes are mostly sourced from FreeBSD.  The PAM changes remove pam_krb5 and pam_ksu, for which there’s an alternative.