how best to do package management?

[Pur A. Lux]

I'm trying ease into using cfengine.  One of the main
things I'd really like to do with it is manage rpms,
and I'm curious how other people have done this.
To start with I'm just interested in managing some
of the rpms - I want to be able to say (via cfengine)
something like 'I want these rpms to be on all my
systems [sysstat-x.x.x, openssh-x.x.x, lynx-x.x.x],
I don't want these rpms on all my systems [telnet-server-x.x.x,
apache-x.x.x, whatever else]'.  I want version
numbers for the rpms involved, so I can push newer
versions of the rpms when needed.

What techniques have people used to do this
within cfengine?

pura