diff -Nru shadow-4.5/debian/changelog shadow-4.5/debian/changelog
--- shadow-4.5/debian/changelog	2017-09-27 18:45:23.000000000 +0200
+++ shadow-4.5/debian/changelog	2018-07-27 10:07:37.000000000 +0200
@@ -1,3 +1,16 @@
+shadow (1:4.5-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload (greetings from DebCamp/DebConf Taiwan).
+  * Stop shipping su and break old util-linux version. (See #833256)
+    - Breaks on old version to force lockstep upgrade, which should
+      really be a depends-new-version (and can be switched around
+      together with util-linux once the transition is finished).
+      Using Breaks/Depends the 'wrong' way around is to make apt
+      unpack things in the 'right' order (avoiding any gaps where
+      /bin/su is not available during the upgrade phase).
+
+ -- Andreas Henriksson <andreas@fatal.se>  Fri, 27 Jul 2018 10:07:37 +0200
+
 shadow (1:4.5-1) unstable; urgency=medium
 
   * New upstream version 4.5
diff -Nru shadow-4.5/debian/control shadow-4.5/debian/control
--- shadow-4.5/debian/control	2017-09-27 18:45:23.000000000 +0200
+++ shadow-4.5/debian/control	2018-07-26 17:41:12.000000000 +0200
@@ -48,7 +48,8 @@
              libpam-modules (>= 1.1.8-1)
 Breaks: coreutils (<< 8.21~) [hurd-any],
         passwd (<< 1:4.1.5.1-2~) [hurd-any],
-        hurd (<< 20140206~) [hurd-any]
+        hurd (<< 20140206~) [hurd-any],
+        util-linux (<< 2.32-0.2~)
 Conflicts: gnunet (<< 0.7.0c-2),
            amavisd-new (<< 2.3.3-8),
            python-4suite (<< 0.99cvs20060405-1),
diff -Nru shadow-4.5/debian/login.install shadow-4.5/debian/login.install
--- shadow-4.5/debian/login.install	2017-09-27 18:45:23.000000000 +0200
+++ shadow-4.5/debian/login.install	2018-06-18 21:01:07.000000000 +0200
@@ -2,7 +2,6 @@
 usr/share/man/*/man1/login.1
 usr/share/man/*/man1/newgrp.1
 usr/share/man/*/man1/sg.1
-usr/share/man/*/man1/su.1
 usr/share/man/*/man5/faillog.5
 usr/share/man/*/man5/login.defs.5
 usr/share/man/*/man8/faillog.8
@@ -11,7 +10,6 @@
 usr/share/man/man1/login.1
 usr/share/man/man1/newgrp.1
 usr/share/man/man1/sg.1
-usr/share/man/man1/su.1
 usr/share/man/man5/faillog.5
 usr/share/man/man5/login.defs.5
 usr/share/man/man8/faillog.8
@@ -22,4 +20,3 @@
 usr/bin/lastlog
 usr/bin/newgrp
 bin/login
-bin/su
diff -Nru shadow-4.5/debian/rules shadow-4.5/debian/rules
--- shadow-4.5/debian/rules	2017-09-27 18:45:23.000000000 +0200
+++ shadow-4.5/debian/rules	2018-06-18 21:06:11.000000000 +0200
@@ -50,7 +50,6 @@
 	sed -i 's/session    optional   pam_keyinit.so/# Linux only # session    optional   pam_keyinit.so/' debian/login.pam
 endif
 	dh_installpam -p login
-	dh_installpam -p login --name=su
 	install -c -m 444 debian/login.defs debian/login/etc/login.defs
 	install -c -m 444 debian/securetty.$(DEB_HOST_ARCH_OS) debian/login/etc/securetty
 	dh_lintian -p login
@@ -81,7 +80,6 @@
 binary-predeb/login::
 	# No real need for login to be setuid root
 	# chmod u+s debian/login/bin/login
-	chmod u+s debian/login/bin/su
 	chmod u+s debian/login/usr/bin/newgrp
 
 binary-predeb/passwd::