1) You can patch them, hope they fit in together and/or patch the *.rej's manually
2) you can use a third party kernel/patch which has both included. For example: http://wolk.sourceforge.net
if you want -ck for 2.4.23 use the patch from Con's page, i merged -ck with grsec. Unfortunately i missed a variable rename so the patch is broken, but a 1-line fix is also on Con's page. Check the url posted by rocky for all of that.