diff --git a/CHANGELOG b/CHANGELOG
index 75c8b04..cc29f4a 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -15,6 +15,7 @@
 - fix get_query_dn not looking in subtree for LDAP search.
 - allow syntax "--timeout <secs>" for backward compatibility.
 - make masked_match independent of hostname for exports comparison.
+- fix file handle leak in nsswitch parser.
 
 1/9/2006 autofs-5.0.1 rc2
 -------------------------
diff --git a/lib/nss_parse.y b/lib/nss_parse.y
index 38b84cc..76ef934 100644
--- a/lib/nss_parse.y
+++ b/lib/nss_parse.y
@@ -136,6 +136,9 @@ int nsswitch_parse(struct list_head *lis
 	nss_list = list;
 	status = nss_parse();
 	nss_list = NULL;
+
+	fclose(nsswitch);
+
 	if (status)
 		return 1;