Then it is (or should be) the responsibility of the package maintainers for those versions to publish the correct hashes for their output files - and to make it clear that the hashes published on keepass.info do not apply to those packages.
Then it is (or should be) the responsibility of the package maintainers for those versions to publish the correct hashes for their output files - and to make it clear that the hashes published on keepass.info do not apply to those packages.