Exclude a single module from a Drush update?
You can use the following command: 

drush pm-update --lock=modulename


There is a post here about it: http://blog.wassill.eu/en/blog/short-excludes-modules-drush-update-09-04-2013