Adjust status for CVE-2018-4868/exiv2

The assessment with unimportant was incorrect after short discussion
with team members. Rather since issue present, mark it as no-dsa still
beeing a minor issue.

Cf. as well the discussion from upstream in
https://github.com/Exiv2/exiv2/issues/202