I just installed SL 6.4 on a test blade and magically last night yum-autoupdate ran and updated bind. The default for yum-autoupdate in /etc/sysconfig/yum-autoupdate is supposed to be ENABLED="false" but the actual value is set to true by default.
Vince