Update CHANGES

 * Remove `rescue Exception`
 * Fix duplicate warnings about sanitize CVE
Bump to 2.4.2