diff -Nru shadow-4.5/debian/changelog shadow-4.5/debian/changelog
--- shadow-4.5/debian/changelog	2017-09-27 18:45:23.000000000 +0200
+++ shadow-4.5/debian/changelog	2018-06-18 21:06:11.000000000 +0200
@@ -1,3 +1,11 @@
+shadow (1:4.5-1.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Stop shipping su and depend on new util-linux version shipping it.
+    (See #833256)
+
+ -- Andreas Henriksson <andreas@fatal.se>  Mon, 18 Jun 2018 21:06:11 +0200
+
 shadow (1:4.5-1) unstable; urgency=medium
 
   * New upstream version 4.5
diff -Nru shadow-4.5/debian/control shadow-4.5/debian/control
--- shadow-4.5/debian/control	2017-09-27 18:45:23.000000000 +0200
+++ shadow-4.5/debian/control	2018-06-18 21:06:11.000000000 +0200
@@ -46,6 +46,7 @@
              ${misc:Depends},
              libpam-runtime,
              libpam-modules (>= 1.1.8-1)
+Depends: util-linux (>= 2.32-0.2~)
 Breaks: coreutils (<< 8.21~) [hurd-any],
         passwd (<< 1:4.1.5.1-2~) [hurd-any],
         hurd (<< 20140206~) [hurd-any]
diff -Nru shadow-4.5/debian/login.install shadow-4.5/debian/login.install
--- shadow-4.5/debian/login.install	2017-09-27 18:45:23.000000000 +0200
+++ shadow-4.5/debian/login.install	2018-06-18 21:01:07.000000000 +0200
@@ -2,7 +2,6 @@
 usr/share/man/*/man1/login.1
 usr/share/man/*/man1/newgrp.1
 usr/share/man/*/man1/sg.1
-usr/share/man/*/man1/su.1
 usr/share/man/*/man5/faillog.5
 usr/share/man/*/man5/login.defs.5
 usr/share/man/*/man8/faillog.8
@@ -11,7 +10,6 @@
 usr/share/man/man1/login.1
 usr/share/man/man1/newgrp.1
 usr/share/man/man1/sg.1
-usr/share/man/man1/su.1
 usr/share/man/man5/faillog.5
 usr/share/man/man5/login.defs.5
 usr/share/man/man8/faillog.8
@@ -22,4 +20,3 @@
 usr/bin/lastlog
 usr/bin/newgrp
 bin/login
-bin/su
diff -Nru shadow-4.5/debian/rules shadow-4.5/debian/rules
--- shadow-4.5/debian/rules	2017-09-27 18:45:23.000000000 +0200
+++ shadow-4.5/debian/rules	2018-06-18 21:06:11.000000000 +0200
@@ -50,7 +50,6 @@
 	sed -i 's/session    optional   pam_keyinit.so/# Linux only # session    optional   pam_keyinit.so/' debian/login.pam
 endif
 	dh_installpam -p login
-	dh_installpam -p login --name=su
 	install -c -m 444 debian/login.defs debian/login/etc/login.defs
 	install -c -m 444 debian/securetty.$(DEB_HOST_ARCH_OS) debian/login/etc/securetty
 	dh_lintian -p login
@@ -81,7 +80,6 @@
 binary-predeb/login::
 	# No real need for login to be setuid root
 	# chmod u+s debian/login/bin/login
-	chmod u+s debian/login/bin/su
 	chmod u+s debian/login/usr/bin/newgrp
 
 binary-predeb/passwd::