The attacker was shot dead at the scene by armed officers; police later make two other arrests. Four victims remain in hospital.