Java update from 1.8.0_144 -> 1.8.0_191 - docker containers/images

You're correct. ECE uses the stack's docker images and in order to take advantages of new features and security patches you will need to upgrade to a new Elasticsearch version.