diff --git a/.gitignore b/.gitignore
index 2c57059..a9bd95e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,3 +29,4 @@
 /Sereal-Decoder-5.001.tar.gz
 /Sereal-Decoder-5.002.tar.gz
 /Sereal-Decoder-5.003.tar.gz
+/Sereal-Decoder-5.004.tar.gz
diff --git a/perl-Sereal-Decoder.spec b/perl-Sereal-Decoder.spec
index ddface7..ab1f9de 100644
--- a/perl-Sereal-Decoder.spec
+++ b/perl-Sereal-Decoder.spec
@@ -2,7 +2,7 @@
 %bcond_without perl_Sereal_Decoder_enables_optional_test
 
 Name:           perl-Sereal-Decoder
-Version:        5.003
+Version:        5.004
 Release:        1%{?dist}
 Summary:        Perl deserialization for Sereal format
 # lib/Sereal/Decoder.pm:    GPL+ or Artistic
@@ -112,6 +112,11 @@ make test
 %{_mandir}/man3/Sereal::Performance.3*
 
 %changelog
+* Wed Apr 19 2023 Paul Howarth <paul@city-fan.org> - 5.004-1
+- Update to 5.004 (rhbz#2188045)
+  - Fix thaw ordering for frozen objects: nested THAW operations now happen in
+    the documented LIFO order (GH#283, GH#285)
+
 * Wed Feb  8 2023 Paul Howarth <paul@city-fan.org> - 5.003-1
 - Update to 5.003 (rhbz#2168015)
   - Update Miniz to 3.0.2, Zstd to 1.5.2 and Devel::CheckLib to 1.16
diff --git a/sources b/sources
index 70cf206..8962452 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Sereal-Decoder-5.003.tar.gz) = a92cac9bdb585cac124642d052d17da163faae4350274d07e9c4dbbab0ec75f86ba24012f41653cd703df93a893d2198fd354f2130d8ce58d6f2860c9b9a4e2f
+SHA512 (Sereal-Decoder-5.004.tar.gz) = 8125abc3bf1834b6c3c2e7404810150408f71d98658078b622b9234d25ff907208d2532055928752c7956434139cd837b38e05a8867bebdbd722cd5be197fa49