diff --git a/debian.changelog b/debian.changelog
index 07fd976..b97ecd7 100644
--- a/debian.changelog
+++ b/debian.changelog
@@ -1,5 +1,5 @@
-gromox (1.13-0) unstable; urgency=low
+gromox (1.28) unstable; urgency=low
 
   * Initial package.
 
- -- Gromox <null@gromox.com>  Mon, 25 Jan 2021 10:00:00 +0100
+ -- Gromox <null@gromox.com>  Mon, 25 Jul 2022 16:24:00 +0200
diff --git a/gromox-1.25.tar.asc b/gromox-1.25.tar.asc
deleted file mode 100644
index 8fa97c9..0000000
--- a/gromox-1.25.tar.asc
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iHUEABYKAB0WIQS8oMXDCcrFaedKkhz3bv5dDCI6jwUCYqYHDQAKCRD3bv5dDCI6
-j/W+AP9dwWqT+xIxPTjHdq/39NM7Tk6e6hncbXbAliAM/q/Z2wEA+3+Ng8ZenMxt
-Ex4G61wv3RA/GpKl6TVB34i3lM55Owg=
-=DT5n
------END PGP SIGNATURE-----
diff --git a/gromox-1.25.tar.xz b/gromox-1.25.tar.xz
deleted file mode 100644
index 87d3a7f..0000000
--- a/gromox-1.25.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b037d5708acc180b6ab40936fa6bffceee16c7d23328a6c9270b85a5d1b78c3e
-size 1316288
diff --git a/gromox-1.28.tar.asc b/gromox-1.28.tar.asc
new file mode 100644
index 0000000..7870903
--- /dev/null
+++ b/gromox-1.28.tar.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYKAB0WIQS8oMXDCcrFaedKkhz3bv5dDCI6jwUCYt6mWAAKCRD3bv5dDCI6
+j+gMAPoDDzRwuHZEmyDkoXtTs6Juhx2r9mn2D6iUq0Gmdw5K4AD/ccuhAehyNmRw
+xOa32D5+mLiNKobFVSbzwpZukc28+w4=
+=5hgg
+-----END PGP SIGNATURE-----
diff --git a/gromox-1.28.tar.xz b/gromox-1.28.tar.xz
new file mode 100644
index 0000000..5a83093
--- /dev/null
+++ b/gromox-1.28.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b449561791bad195574cc9243d60ba27b9349c4373bea2408bf40cd985f26a43
+size 1319980
diff --git a/gromox.changes b/gromox.changes
index 7536dd1..f2e5bbd 100644
--- a/gromox.changes
+++ b/gromox.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Mon Jul 25 16:45:33 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.28
+  * freebusy: do not publicize private recurrence exceptions
+  * Delayed Sending had left messages in Outbox
+  * emsmdb: the contact folder list erroneously rejected sort
+    requests that grouped and sorted by the same column
+
 -------------------------------------------------------------------
 Sun Jun 12 21:49:52 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/gromox.spec b/gromox.spec
index a061dfc..25d07ad 100644
--- a/gromox.spec
+++ b/gromox.spec
@@ -19,7 +19,7 @@
 %define _libexecdir %_prefix/libexec
 
 Name:           gromox
-Version:        1.25
+Version:        1.28
 Release:        0
 Summary:        Groupware server backend with RPC, IMAP,POP3, PHP-MAPI support
 License:        AGPL-3.0-or-later AND GPL-2.0-only AND GPL-3.0-or-later
@@ -61,6 +61,7 @@ BuildRequires:  pkgconfig(sqlite3)
 BuildRequires:  pkgconfig(tinyxml2) >= 8
 BuildRequires:  pkgconfig(vmime) >= 0.9.2
 BuildRequires:  pkgconfig(zlib)
+BuildRequires:  user(grommunio)
 BuildRequires:  user(gromox)
 Requires:       php-cli >= 7.4
 Requires:       php-fpm
@@ -72,6 +73,7 @@ Requires:       php-mysqlnd
 %endif
 Requires:       php-soap
 Requires:       w3m
+Requires(pre):  user(grommunio)
 Requires(pre):  user(gromox)
 Requires(pre):  group(gromox)
 %{?systemd_ordering}
@@ -222,11 +224,9 @@ fi
 
 %files
 %_sysconfdir/php*
-# Somehow need to give grommunio-admin-api write permissions.
-# RPM probably does not do ACL well (if at all).
-# Services use ProtectSystem=, so it's ok to have g+w for grommunio-admin-api.
+# Group write permission is exercised by grommunio-admin-api.
 # pam.cfg needs to be readable by all
-%attr(0775,root,gromox) %dir %_sysconfdir/%name/
+%attr(0775,root,grommunio) %dir %_sysconfdir/%name/
 %_sbindir/gromox-*
 %_libdir/*.so.*
 %_libdir/%name/