Add related commits for exiv2 for upstream issues #590

The issues need to be further investigated as there are two related CVEs
in TODO: check status sas well (CVE-2018-20096, CVE-2018-20097).

All refer to issues ocvered in upstream
https://github.com/Exiv2/exiv2/issues/590 .