diff --git a/CHANGES b/CHANGES
index 0abf9382b2..4568845a5b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6333.	[bug]		Fix the DNS_GETDB_STALEFIRST flag, which was defined
+			incorrectly in lib/ns/query.c. [GL !8683]
+
 6332.	[bug]		Range-check the arguments to fetch-quota-param.
 			[GL #362]
 
diff --git a/lib/ns/query.c b/lib/ns/query.c
index 34e47e2b1e..8017d04594 100644
--- a/lib/ns/query.c
+++ b/lib/ns/query.c
@@ -196,11 +196,13 @@ client_trace(ns_client_t *client, int level, const char *message) {
 #define CCTRACE(l, m) ((void)m)
 #endif /* WANT_QUERYTRACE */
 
-#define DNS_GETDB_NOEXACT    0x01U
-#define DNS_GETDB_NOLOG	     0x02U
-#define DNS_GETDB_PARTIAL    0x04U
-#define DNS_GETDB_IGNOREACL  0x08U
-#define DNS_GETDB_STALEFIRST 0X0CU
+enum {
+	DNS_GETDB_NOEXACT = 1 << 0,
+	DNS_GETDB_NOLOG = 1 << 1,
+	DNS_GETDB_PARTIAL = 1 << 2,
+	DNS_GETDB_IGNOREACL = 1 << 3,
+	DNS_GETDB_STALEFIRST = 1 << 4,
+};
 
 #define PENDINGOK(x) (((x) & DNS_DBFIND_PENDINGOK) != 0)