The documentation, https://doc.ez.no/pages/viewpage.action?title=5.3.3+Release+Notes&spaceKey=EZP, there should be information about how to apply the composer.json patch.
IMHO com composer.json diff should be prepared to apply the patch using

patch -p0 < composer.json.diff

and not

patch -p1 < composer.json.diff