I just got bit by this as well. If you are creating your own bundle and need to specify a certain module, you can refer to it by the full CPAN name/path, so for example, if you _really_ have to use DBI 1.21, you can include this in your bundle:

TIMB/DBI-1.21.tar.gz
[download]

and that is the only version that gets installed.