Track source package for three new exiv2 issues

Keep undetermined for now as proper evaluation is still outstanding. But
it is clear already that it is associated with src:exiv2.