diff --git a/doc/Changelog b/doc/Changelog
index 290cf4f86..97c4f41cf 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -2,6 +2,7 @@
 	- Fix #1301: memory leak in respip and tests.
 	- Free callback in edns-subnetmod on exit and restart.
 	- Fix memory leak in sldns_buffer_new_frm_data.
+	- Fix memory leak in dnscrypt config read.
 
 15 June 2017: Wouter
 	- Fix stub zone queries leaking to the internet for
diff --git a/util/configparser.y b/util/configparser.y
index ea7b62ee5..7c8161442 100644
--- a/util/configparser.y
+++ b/util/configparser.y
@@ -2329,6 +2329,7 @@ dnsc_dnscrypt_enable: VAR_DNSCRYPT_ENABLE STRING_ARG
 		if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
 			yyerror("expected yes or no.");
 		else cfg_parser->cfg->dnscrypt = (strcmp($2, "yes")==0);
+		free($2);
 	}
 	;