Update wpa_supplicant/hostapd for 2017-01 vulnerability release.

[emaste]

I believe this is the expected set of patches. I noticed one minor difference between the Debian patch set I inspected and this (tk_to_set vs tk_already_set) which is probably due to targeting different versions?

[gordon]

In D12693#263608, @emaste wrote:

I believe this is the expected set of patches. I noticed one minor difference between the Debian patch set I inspected and this (tk_to_set vs tk_already_set) which is probably due to targeting different versions?

Reviewing https://w1.fi/security/2017-1/0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch, I believe this is source material for using the tk_already_set nomenclature.